Skip to content
OpenAdvisories

Archive

22 May 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    Dolibarr SQL Injection vulnerability

    SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list…

  • Critical 9.8
    CVE-2018-10094 Public exploit EPSS 69%

    Dolibarr SQL injection vulnerability

    SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.