Lucene search

K
osvGoogleOSV:GHSA-9986-6M4G-25F6
HistoryMay 14, 2022 - 3:23 a.m.

Dolibarr SQL injection vulnerability

2022-05-1403:23:30
Google
osv.dev
6
dolibarr
erp/crm
sql injection

AI Score

8

Confidence

Low

EPSS

0.001

Percentile

39.2%

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter).

AI Score

8

Confidence

Low

EPSS

0.001

Percentile

39.2%