Skip to content
OpenAdvisories

Package · Ubuntu

dolibarr

134 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-23500 Public exploit

    Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

    Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in odf.php concatenates the MAIN_ODT_AS_PDF configuration constant directly into a s…

    Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.4
    CVE-2012-10059 Public exploit

    Dolibarr ERP/CRM Post-Auth OS Command Injection

    Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary …

    Dolibarr ERP CRM dolibarr Ubuntu
  • Critical 9.8
    CVE-2018-10094 Public exploit EPSS 69%

    Dolibarr SQL injection vulnerability

    SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

    dolibarr dolibarr/dolibarr Ubuntu Packagist