Lucene search
GoogleOSV:GHSA-7X8G-H246-GVX3HistoryMay 24, 2022 - 5:37 p.m.
Dolibarr authenticated Remote Code Execution
2022-05-2417:37:06
Google
osv.dev
3
dolibarr
remote code execution
vulnerability
admin dashboard
backup function
payload
filename parameter
zipfilename_template
dolibarr_export.php
software
Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.
Related
nvd
nvd
CVE-2020-35136
2020-12-23 15:15:16
github
github
Dolibarr authenticated Remote Code Execution
2022-05-24 17:37:06
prion
prion
Remote code execution
2020-12-23 15:15:00
cvelist
cvelist
CVE-2020-35136
2020-12-23 14:39:49
osv
osv
CVE-2020-35136
2020-12-23 15:15:16
veracode
veracode
Remote Code Execution (RCE)
2020-12-24 00:43:55
ubuntucve
ubuntucve
CVE-2020-35136
2020-12-23 00:00:00
cve
cve
CVE-2020-35136
2020-12-23 15:15:16