Skip to contentDolibarr vulnerabilities
Newest
- dolibarrDolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.phpCVE-2019-192129.8 Critical
- dolibarrDolibarr ERP and CRM contain XSS VulnerabilityCVE-2019-19211Fix available6.1 Medium
- dolibarrDolibarr ERP and CRM contain XSS VulnerabilityCVE-2019-19210Fix available5.4 Medium
- dolibarrDolibarr ERP and CRM SQLiCVE-2019-19209Fix available7.5 High
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2020-90165.4 Medium
- dolibarr erp\/crmDolibarr cross-site scripting (XSS) vulnerabilityCVE-2020-79946.1 Medium
- dolibarr erp\/crmDolibarr Improper Restriction of Excessive Authentication AttemptsCVE-2020-79959.8 Critical
- dolibarr erp\/crmXSS in Dolibarr ERP & CRMCVE-2020-79966.1 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2019-192065.4 Medium
- dolibarr, dolibarr erp\/crm +1 moreDolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php...CVE-2013-20939.8 Critical
- dolibarr, dolibarr erp\/crm +1 moreCross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary...CVE-2013-20926.1 Medium
- dolibarr, dolibarr erp\/crm +1 moreSQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute...CVE-2013-20919.8 Critical
- dolibarr erp\/crmDolibarr Cross-site Scripting via outgoing email setup featureCVE-2019-175765.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting via outgoing email setup featureCVE-2019-175775.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting vulnerabilityCVE-2019-175785.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM HTML InjectionCVE-2019-17223Fix available6.1 Medium
- dolibarr erp\/crmDolibarr stored Cross-site Scripting in an Email Template sectionCVE-2019-166885.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting in a User Profile in a Signature sectionCVE-2019-166875.4 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting in a User Note sectionCVE-2019-166865.4 Medium
- dolibarr erp\/crmDolibarr stored Cross-site Scripting vulnerabilityCVE-2019-166855.4 Medium
- dolibarr erp\/crmCross-site scripting in DolibarrCVE-2019-16197Public exploitFix available6.1 Medium
- dolibarr erp\/crmDolibarr Cross-Site Request Forgery (CSRF)CVE-2019-15062Fix available8.0 High
- dolibarr erp\/crmDolibarr ERP and CRM Code InjectionCVE-2019-11201Fix available8.0 High
- dolibarr erp\/crmDolibarr ERP and CRM malicious executable loadingCVE-2019-11200Fix available8.8 High
- dolibarr erp\/crmDolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. These vulnerabilities...CVE-2019-111995.4 Medium
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Cross Site Request Forgery (CSRF)CVE-2019-1010054Public exploit8.8 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Cross Site Scripting (XSS)CVE-2019-10100166.1 Medium
- dolibarrDolibarr SQL injection via the integer parameters qty and value_unitCVE-2018-168099.8 Critical
- dolibarrDolibarr Stored Cross-site Scripting in expensereport/card.phpCVE-2018-16808Fix available6.1 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in user/card.phpCVE-2018-19998Fix available8.8 High
- dolibarr erp\/crmDolibarr stored cross-site scripting (XSS) vulnerabilityCVE-2018-19995Fix available5.4 Medium
- dolibarr erp\/crmDolibarr error-based SQL injection vulnerability in product/card.phpCVE-2018-19994Fix available8.8 High
- dolibarr erp\/crmDolibarr reflected cross-site scripting (XSS) vulnerabilityCVE-2018-19993Fix available6.1 Medium
- dolibarr erp\/crmDolibarr stored cross-site scripting (XSS) vulnerabilityCVE-2018-19992Fix available5.4 Medium
- dolibarrDolibarr ERP and CRM contain XSS VulnerabilityCVE-2018-19799Public exploit6.1 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13450Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13449Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13448Fix available9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in product/card.phpCVE-2018-13447Fix available9.8 Critical
- dolibarr, oracle data integrator +1 moreDolibarr SQL Injection vulnerabilityCVE-2018-9019Fix available9.8 Critical
- dolibarrDolibarr Cross-site scripting (XSS) vulnerabilityCVE-2018-10095Fix availableEPSS 86.5%6.1 Medium
- dolibarrDolibarr SQL injection vulnerabilityCVE-2018-10094Public exploitFix availableEPSS 69.3%9.8 Critical
- dolibarrDolibarr arbitrary commands executionCVE-2018-10092Fix available8.0 High
- dolibarr erp\/crmDolibarr SQL injection via type parameter in product/stats/card.phpCVE-2017-9839Fix available8.8 High
- dolibarr erp\/crmDolibarr Cross-Site Scripting (XSS) vulnerabilityCVE-2017-9838Fix available5.4 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerabilityCVE-2017-182608.8 High
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2017-182595.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2017-1000509Fix available5.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS VulnerabilityCVE-2017-17971Fix available6.1 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability in fourn/index.phpCVE-2017-17900Fix available9.8 Critical
- Show moreLoading…