Lucene search

K
osvGoogleOSV:GHSA-97JV-2HP6-3FRJ
HistoryMay 14, 2022 - 1:41 a.m.

Dolibarr SQL injection vulnerability in user/card.php

2022-05-1401:41:36
Google
osv.dev
5
dolibarr
sql injection
user/card.php
version 8.0.2
remote authenticated users
arbitrary sql commands
employee parameter
software

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

46.6%

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.

AI Score

8.1

Confidence

Low

EPSS

0.001

Percentile

46.6%