auxiliary/gather/dolibarr_creds_sqli

functional

Dolibarr Gather Credentials via SQL Injection

view exploit source metasploittype auxiliarypublished 2018-05-30catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-10094US	critical9.8	69.8% (99th)	Exploit	2018-05-22
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.