Skip to content
OpenAdvisories

Package · Ubuntu

dolibarr

134 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • High 8.8
    CVE-2017-18260

    Dolibarr SQL injection vulnerability

    Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter).

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2017-9839

    Dolibarr SQL injection via type parameter in product/stats/card.php

    Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter).

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.5
    CVE-2017-17898

    Dolibarr sensitive information disclosure

    Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 7.5
    CVE-2017-14240

    Dolibarr ERP and CRM Sensitive Data Disclosure

    There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2017-9840

    Dolibarr ERP and CRM Unsafe File Upload Vulnerability

    Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.

    dolibarr dolibarr/dolibarr Ubuntu Packagist