DO
Product
dolibarr
61
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 9High 19Medium 31Low 0
Watch
Add dolibarr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-19212 | 9.8 | Mar 16 | Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen) Affected: 3.0.0 through 10.0.3 |
| CVE-2018-16809 | 9.8 | Mar 7 | An issue was discovered in Dolibarr through 7.0.0 Affected: 3.8.0 through 7.0.0 |
| CVE-2018-9019 | 9.8 | May 22 | SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to… Affected: before 7.0.2 |
| CVE-2018-10094 | 9.8 | May 22 | SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes Affected: before 7.0.2 |
| CVE-2017-14242 | 9.8 | Sep 11 | SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter Affected: 6.0.0 |
| CVE-2017-14238 | 9.8 | Sep 11 | SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter Affected: 6.0.0 |
| CVE-2017-9435 | 9.8 | Jun 5 | Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters) Affected: through 5.0.2 |
| CVE-2026-23500 | 9.1 | Apr 17 | Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration Affected: < 23.0.0 |
| CVE-2021-25955 | 9.0 | Aug 15 | In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts… Affected: 2.8.1 through 13.0.2 |
Showing 9