Skip to contentDolibarr Erp\/crm vulnerabilities
- dolibarr erp\/crmDolibarr remote PHP code executionCVE-2021-33816Fix available9.8 Critical
- dolibarr, dolibarr erp\/crm +1 moreImproper User Access Control in "Dolibarr" Leads to Account TakeoverCVE-2021-25956Fix available4.7 Medium
- dolibarr erp\/crmDolibarr authenticated Remote Code ExecutionCVE-2020-35136Fix available7.2 High
- dolibarr erp\/crmDolibarr stored Cross-Site Scripting (XSS) vulnerabilityCVE-2020-138285.4 Medium
- dolibarr erp\/crmDolibarr reflected cross-site scripting (XSS) vulnerabilityCVE-2020-14475Fix available6.1 Medium
- dolibarr erp\/crmDolibarr Stored Cross-site Scripting via file uploadCVE-2020-132395.4 Medium
- dolibarr erp\/crmDolibarr Stored Cross-site ScriptingCVE-2020-132405.4 Medium
- dolibarr erp\/crmDolibarr Cross-Site Request Forgery VulnerabilityCVE-2020-118258.8 High
- dolibarr erp\/crmDolibarr stored Cross-site Scripting vulnerabilityCVE-2020-118235.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2020-90165.4 Medium
- dolibarr erp\/crmDolibarr cross-site scripting (XSS) vulnerabilityCVE-2020-79946.1 Medium
- dolibarr erp\/crmDolibarr Improper Restriction of Excessive Authentication AttemptsCVE-2020-79959.8 Critical
- dolibarr erp\/crmXSS in Dolibarr ERP & CRMCVE-2020-79966.1 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2019-192065.4 Medium
- dolibarr, dolibarr erp\/crm +1 moreDolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php...CVE-2013-20939.8 Critical
- dolibarr, dolibarr erp\/crm +1 moreCross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary...CVE-2013-20926.1 Medium
- dolibarr, dolibarr erp\/crm +1 moreSQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute...CVE-2013-20919.8 Critical
- dolibarr erp\/crmDolibarr Cross-site Scripting via outgoing email setup featureCVE-2019-175765.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting via outgoing email setup featureCVE-2019-175775.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting vulnerabilityCVE-2019-175785.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM HTML InjectionCVE-2019-17223Fix available6.1 Medium
- dolibarr erp\/crmDolibarr stored Cross-site Scripting in an Email Template sectionCVE-2019-166885.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting in a User Profile in a Signature sectionCVE-2019-166875.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting in a User Note sectionCVE-2019-166865.4 Medium
- dolibarr erp\/crmDolibarr stored Cross-site Scripting vulnerabilityCVE-2019-166855.4 Medium
- dolibarr erp\/crmCross-site scripting in DolibarrCVE-2019-16197Public exploitFix available6.1 Medium
- dolibarr erp\/crmDolibarr Cross-Site Request Forgery (CSRF)CVE-2019-15062Fix available8.0 High
- dolibarr erp\/crmDolibarr ERP and CRM Code InjectionCVE-2019-11201Fix available8.0 High
- dolibarr erp\/crmDolibarr ERP and CRM malicious executable loadingCVE-2019-11200Fix available8.8 High
- dolibarr erp\/crmDolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. These vulnerabilities...CVE-2019-111995.4 Medium
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Cross Site Request Forgery (CSRF)CVE-2019-1010054Public exploit8.8 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Cross Site Scripting (XSS)CVE-2019-10100166.1 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in user/card.phpCVE-2018-19998Fix available8.8 High
- dolibarr erp\/crmDolibarr stored cross-site scripting (XSS) vulnerabilityCVE-2018-19995Fix available5.4 Medium
- dolibarr erp\/crmDolibarr error-based SQL injection vulnerability in product/card.phpCVE-2018-19994Fix available8.8 High
- dolibarr erp\/crmDolibarr reflected cross-site scripting (XSS) vulnerabilityCVE-2018-19993Fix available6.1 Medium
- dolibarr erp\/crmDolibarr stored cross-site scripting (XSS) vulnerabilityCVE-2018-19992Fix available5.4 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13450Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13449Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13448Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13447Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection via type parameter in product/stats/card.phpCVE-2017-9839Fix available8.8 High
- dolibarr erp\/crmDolibarr Cross-Site Scripting (XSS) vulnerabilityCVE-2017-9838Fix available5.4 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerabilityCVE-2017-182608.8 High
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2017-182595.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2017-1000509Fix available5.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2017-17971Fix available6.1 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in fourn/index.phpCVE-2017-17900Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in adherents/subscription/info.phpCVE-2017-17899Fix available9.8 Critical
- dolibarr erp\/crmDolibarr sensitive information disclosureCVE-2017-17898Fix available7.5 High
- Show moreLoading…