Skip to content
OpenAdvisories

Archive

24 December 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    Dolibarr SQL injection vulnerability in comm/multiprix.php

    SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • Critical 9.8

    Dolibarr SQL injection vulnerability in fourn/index.php

    SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.

  • Critical 9.8

    Dolibarr SQL injection vulnerability in adherents/subscription/info.php

    SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.