Skip to content
OpenAdvisories

Package · Packagist

dolibarr/dolibarr

127 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-23500 Public exploit

    Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

    Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in odf.php concatenates the MAIN_ODT_AS_PDF configuration constant directly into a s…

    Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2018-10094 Public exploit EPSS 69%

    Dolibarr SQL injection vulnerability

    SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

    dolibarr dolibarr/dolibarr Ubuntu Packagist