Package · Packagist

dolibarr/dolibarr

127 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 6.5

CVE-2026-34036 Public exploit Scanner template

Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) vulnerability in the core AJAX endpoint /core/ajax/selectobject.php. By manipula…

Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist

Mar 31, 2026
Medium 5.4

CVE-2020-13094 Public exploit

XSS in Dolibarr

Dolibarr before 11.0.4 allows XSS.

dolibarr dolibarr/dolibarr Ubuntu Packagist

May 18, 2020
Medium 6.1

CVE-2019-16197 Public exploit

Cross-site scripting in Dolibarr

In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

dolibarr dolibarr/dolibarr Ubuntu Packagist

Sep 16, 2019
Medium 6.1

CVE-2018-19799 Public exploit

Dolibarr ERP and CRM contain XSS Vulnerability

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

dolibarr dolibarr/dolibarr Ubuntu Packagist

Dec 26, 2018