Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 183

Export CSV
CVE-2013-2092

Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Dolibarr
Products
Dolibarr Erp\/crm
CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Dolibarr
Products
Dolibarr Erp\/crm
CVE-2021-3991

Improper Authorization in dolibarr/dolibarr

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dolibarr
Products
Dolibarr Dolibarr Erp\/crm