Lucene search

K
osvGoogleOSV:GHSA-M5RG-G6F9-8WPW
HistoryMay 14, 2022 - 3:08 a.m.

Dolibarr SQL injection vulnerability in product/card.php

2022-05-1403:08:35
Google
osv.dev
3
dolibarr
sql injection
product/card.php
erp/crm
version 7.0.3
remote attackers
arbitrary sql commands
country_id parameter
software

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

46.8%

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

46.8%