GHSA-v3m8-7h3p-6j5m

ghsaUSosv

Dolibarr ERP and CRM SQLi

view advisory published 2022-05-17Licence: CC-BY-4.0

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-9435US	critical9.8	1.48% (74th)	—	2017-06-05
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.