Skip to content
OpenAdvisories

Vendor

Dolibarr

65 known vulnerabilities.

Products

dolibarr 35 dolibarr/dolibarr 11 Dolibarr ERP/CRM 8 ERP CRM 6 ERP CMS 2 ERP 2 CRM 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-89012 Public exploit

    Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter

    Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field na…

    Dolibarr dolibarr
  • Medium 6.5
    CVE-2026-34036 Public exploit Scanner template

    Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php

    Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) vulnerability in the core AJAX endpoint /core/ajax/selectobject.php. By manipula…

    Dolibarr dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist