Description

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

Remediation

References

CVE-2017-9435

Related Vulnerabilities

Joomla! Core 3.x.x Local File Inclusion (3.0.0 - 3.9.25)

WordPress Plugin BrewMaster Multiple Cross-Site Scripting Vulnerabilities (1.0)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (5.1.9.2)

WordPress Plugin gboutique Local File Inclusion (1.3)

Oracle Database Server CVE-2011-2257 Vulnerability (CVE-2011-2257)

Severity

Critical

Classification

CVE-2017-9435 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities