Description

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.

Remediation

References

CVE-2018-19994

Related Vulnerabilities

WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.29)

WordPress Plugin YouSayToo auto-publishing 'submit' Parameter Cross-Site Scripting (1.0.1)

Perl Out-of-bounds Write Vulnerability (CVE-2023-47038)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687)

Perl Resource Management Errors Vulnerability (CVE-2013-1667)

Severity

High

Classification

CVE-2018-19994 CWE-138 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities