Skip to content
OpenAdvisories

Vendor

Dolibarr

65 known vulnerabilities.

Products

dolibarr 35 dolibarr/dolibarr 11 Dolibarr ERP/CRM 8 ERP CRM 6 ERP CMS 2 ERP 2 CRM 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-23500 Public exploit

    Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

    Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in odf.php concatenates the MAIN_ODT_AS_PDF configuration constant directly into a s…

    Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.4
    CVE-2012-10059 Public exploit

    Dolibarr ERP/CRM Post-Auth OS Command Injection

    Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary …

    Dolibarr ERP CRM dolibarr Ubuntu