İçeriğe atla
Noroxi

Dolibarr kayıtları

dolibarr üreticisine ait 144 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %2,1
Pre-auth RCE
23
Düzeltme kaydı olan
%57,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

144 kayıt
  • CVE-2023-30253
    60Bu hafta

    Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in inject

    YüksekCVSS 8,8SilahlaştırılmışEPSS %82

    dolibarr · dolibarr erp\/crm29 May 2023

  • CVE-2018-10094
    60Bu hafta

    SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer

    KritikCVSS 9,8SilahlaştırılmışEPSS %69

    dolibarr · dolibarr22 May 2018

  • CVE-2023-33568
    60Bu hafta

    An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer fil

    YüksekCVSS 7,5SilahlaştırılmışEPSS %14

    dolibarr · dolibarr erp\/crm13 Haz 2023

  • CVE-2018-10095
    50Planlayın

    Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the for

    OrtaCVSS 6,1Kavram kanıtıEPSS %86

    dolibarr · dolibarr22 May 2018

  • CVE-2022-40871
    49Planlayın

    Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection.

    KritikCVSS 9,8İstismar yokEPSS %33

    dolibarr · dolibarr erp\/crm12 Eki 2022

  • CVE-2021-33618
    48Planlayın

    Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY el

    OrtaCVSS 6,1İstismar yokEPSS %79

    dolibarr · dolibarr erp\/crm10 Kas 2021

  • CVE-2022-0819
    48Planlayın

    Code Injection in dolibarr/dolibarr

    YüksekCVSS 8,8İstismar yokEPSS %42

    dolibarr · dolibarr erp\/crm2 Mar 2022

  • CVE-2023-4197
    46Planlayın

    Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

    YüksekCVSS 8,8Kavram kanıtıEPSS %35

    dolibarr · dolibarr erp\/crm1 Kas 2023

  • CVE-2024-5315
    46Planlayın

    Multiple vulnerabilities in DOLIBARR's ERP CMS

    KritikCVSS 9,1Kavram kanıtıEPSS %34

    dolibarr · dolibarr erp\/crm24 May 2024

  • CVE-2020-14209
    43Planlayın

    Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %27

    dolibarr · dolibarr2 Eyl 2020

  • CVE-2013-2093
    41Planlayın

    Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute a

    KritikCVSS 9,8İstismar yokEPSS %5

    dolibarr · dolibarr erp\/crm20 Kas 2019

  • CVE-2020-7995
    40Planlayın

    The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.

    KritikCVSS 9,8İstismar yokEPSS %4

    dolibarr · dolibarr erp\/crm26 Oca 2020

  • CVE-2022-4093
    40Planlayın

    SQL Injection in dolibarr/dolibarr

    KritikCVSS 9,8İstismar yokEPSS %4

    dolibarr · dolibarr erp\/crm21 Kas 2022

  • CVE-2021-33816
    40Planlayın

    The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system

    KritikCVSS 9,8İstismar yokEPSS %3

    dolibarr · dolibarr erp\/crm10 Kas 2021

  • CVE-2018-9019
    40Planlayın

    SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield par

    KritikCVSS 9,8İstismar yokEPSS %3

    dolibarr · dolibarr22 May 2018

  • CVE-2019-19212
    40Planlayın

    Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).

    KritikCVSS 9,8İstismar yokEPSS %3

    dolibarr · dolibarr16 Mar 2020

  • CVE-2013-2091
    40Planlayın

    SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in

    KritikCVSS 9,8İstismar yokEPSS %2

    dolibarr · dolibarr erp\/crm20 Kas 2019

  • CVE-2018-16809
    40Planlayın

    An issue was discovered in Dolibarr through 7.0.0.

    KritikCVSS 9,8İstismar yokEPSS %2

    dolibarr · dolibarr7 Mar 2019

  • CVE-2022-0224
    40Planlayın

    SQL Injection in dolibarr/dolibarr

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm14 Oca 2022

  • CVE-2018-13447
    40Planlayın

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm8 Tem 2018

  • CVE-2018-13448
    40Planlayın

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm8 Tem 2018

  • CVE-2018-13450
    40Planlayın

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm8 Tem 2018

  • CVE-2018-13449
    40Planlayın

    SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm8 Tem 2018

  • CVE-2017-17900
    40Planlayın

    SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands v

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm27 Ara 2017

  • CVE-2017-17899
    40Planlayın

    SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrar

    KritikCVSS 9,8İstismar yokEPSS %1

    dolibarr · dolibarr erp\/crm27 Ara 2017