dolibarr vulnerabilities (Ubuntu)
134 vulnerabilities.
-
dolibarrUbuntu Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.php 6.9 Medium -
dolibarrUbuntu Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter 8.6 High -
dolibarrUbuntu Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field 7.2 High -
dolibarrUbuntu Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php 5.3 Medium -
dolibarrUbuntu Dolibarr ERP TakePOS invoice.php fail authorization 5.3 Medium -
dolibarrUbuntu Dolibarr ERP CRM messaging.php authorization 5.3 Medium -
dolibarrUbuntu An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote... 7.3 High -
dolibarrUbuntu An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote... 7.3 High -
dolibarrUbuntu An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote... 7.3 High -
dolibarrUbuntu Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php 9.3 Critical -
dolibarrUbuntu Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification 6.3 Medium -
dolibarrUbuntu Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection 2.3 Low -
dolibarrUbuntu Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions 8.8 High -
dolibarrUbuntu Dolibarr Allows Code Injection through its Website Module 8.8 High -
dolibarrUbuntu Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration 9.4 Critical -
dolibarrUbuntu Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter 8.8 High -
dolibarrUbuntu Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard() 8.6 High -
dolibarrUbuntu Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php 6.5 Medium -
dolibarrUbuntu Dolibarr ERP/CRM 10.0.1 SQL Injection via elemid 8.8 High -
dolibarrUbuntu Dolibarr ERP/CRM 10.0.1 SQL Injection via card.php 7.1 High -
dolibarrUbuntu Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting 5.1 Medium -
dolibarrUbuntu Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation 8.4 High -
dolibarrUbuntu Dolibarr vulnerable to RCE via the computed field parameter 8.8 High -
dolibarrUbuntu Dolibarr ERP/CRM Post-Auth OS Command Injection 9.4 Critical -
dolibarrUbuntu Dolibarr Cross-site Scripting vulnerability 9.0 Critical -
dolibarrUbuntu Dolibarr Cross-site Scripting vulnerability 9.0 Critical -
dolibarrUbuntu Improper Authorization in dolibarr/dolibarr 4.3 Medium -
dolibarrUbuntu Dolibarr ERP CRM vulnerable to remote code execution (RCE) 5.5 Medium -
dolibarrUbuntu Reflected Cross-Site Scripting (XSS) in Dolibarr 4.6 Medium -
dolibarrUbuntu Multiple vulnerabilities in DOLIBARR's ERP CMS 9.1 Critical -
dolibarrUbuntu Multiple vulnerabilities in DOLIBARR's ERP CMS 9.1 Critical -
dolibarrUbuntu Dolibarr vulnerable to Cross-Site Request Forgery 7.5 High -
dolibarrUbuntu Dolibarr ERP CRM Code Injection vulnerability during installation 8.8 High -
dolibarrUbuntu Dolibarr Application Home Page HTML injection vulnerability 7.1 High -
dolibarrUbuntu Dolibarr ERP CRM (<= 17.0.3) Improper Access Control 6.5 Medium -
dolibarrUbuntu Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE 7.5 High -
dolibarrUbuntu Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr 5.4 Medium -
dolibarrUbuntu Cross Site Scripting vulnerability in Dolibarr ERP CRM 9.6 Critical -
dolibarrUbuntu File Upload vulnerability in Dolibarr ERP CRM 8.8 High -
dolibarrUbuntu Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script 7.2 High -
dolibarrUbuntu Dolibarr vulnerable to unauthenticated database access 7.5 High -
dolibarrUbuntu Dolibarr vulnerable to remote code execution via uppercase manipulation 8.8 High -
dolibarrUbuntu SQL Injection in dolibarr/dolibarr 8.1 High -
dolibarrUbuntu Dolibarr vulnerable to privilege escalation 9.8 Critical -
dolibarrUbuntu Dolibarr vulnerable to Eval Injection 9.8 Critical -
dolibarrUbuntu Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr 8.4 High -
dolibarrUbuntu Access Control vulnerability in Dolibarr 7.5 High -
dolibarrUbuntu SQL Injection in Dolibarr 8.8 High -
dolibarrUbuntu Code Injection in dolibarr/dolibarr 7.2 High -
dolibarrUbuntu Business Logic Errors in dolibarr/dolibarr 4.3 Medium - Show olderLoading…