dolibarr

4 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-34036 Public exploit Scanner template

  Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

  Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) vulnerability in the core AJAX endpoint /core/ajax/selectobject.php. By manipula…

  Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  Mar 31, 2026
• Medium 5.4
  CVE-2020-13094 Public exploit

  XSS in Dolibarr

  Dolibarr before 11.0.4 allows XSS.

  dolibarr dolibarr/dolibarr Ubuntu Packagist
  May 18, 2020
• Medium 6.1
  CVE-2019-16197 Public exploit

  Cross-site scripting in Dolibarr

  In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

  dolibarr dolibarr/dolibarr Ubuntu Packagist
  Sep 16, 2019
• Medium 6.1
  CVE-2018-19799 Public exploit

  Dolibarr ERP and CRM contain XSS Vulnerability

  Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

  dolibarr dolibarr/dolibarr Ubuntu Packagist
  Dec 26, 2018