Dolibarr vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
55 matching records
- Critical9.8Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).Check if you run itEPSS 1.48%Jun 5, 2017
- Medium5.4Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastn…Check if you run itEPSS 1.39%Jan 15, 2016
- Medium6.1Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ext…Check if you run itEPSS 1.70%Jan 15, 2016
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Sear…Check if you run itEPSS 1.92%Jun 10, 2015
- Medium6.5Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) contactid parame…Check if you run itEPSS 1.70%Nov 21, 2014