Page 2 of 18 results (0.013 seconds)

CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-2060 – Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-2060

13 Jun 2022 — Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en el repositorio de GitHub dolibarr/dolibarr versiones anteriores a 16.0 • https://github.com/dolibarr/dolibarr/commit/2b5b9957c3010a5db9d1988c2efe5b209b16b47f • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0819 – Code Injection in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0819

02 Mar 2022 — Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1. Una Inyección de Código en el repositorio GitHub dolibarr/dolibarr versiones anteriores a 15.0.1 • https://github.com/dolibarr/dolibarr/commit/2a48dd349e7de0d4a38e448b0d2ecbe25e968075 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0746 – Business Logic Errors in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0746

25 Feb 2022 — Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. Unos Errores de Lógica de Negocios en el repositorio de GitHub dolibarr/dolibarr versiones anteriores a 16.0. • https://github.com/dolibarr/dolibarr/commit/4973019630d51ad76b7c1a4141ec7a33053a7d21 • CWE-840: Business Logic Errors •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0731 – Improper Access Control (IDOR) in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0731

23 Feb 2022 — Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0. Un Control de Acceso Inapropiado (IDOR) en el repositorio de GitHub dolibarr/dolibarr versiones anteriores a 16.0 • https://github.com/dolibarr/dolibarr/commit/209ab708d4b65fbd88ba4340d60b7822cb72651a • CWE-284: Improper Access Control CWE-639: Authorization Bypass Through User-Controlled Key •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0414 – Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0414

31 Jan 2022 — Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0. Unos Errores de Lógica de Negocio en el paquete dolibarr/dolibarr versiones anteriores a 16.0 • https://github.com/dolibarr/dolibarr/commit/37fb02ee760cfff18c795ba468da1ba1c53f4684 • CWE-1284: Improper Validation of Specified Quantity in Input •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0224 – SQL Injection in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0224

14 Jan 2022 — dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command dolibarr es vulnerable a una Neutralización Inapropiada de los Elementos Especiales usados en un Comando SQL • https://github.com/dolibarr/dolibarr/commit/b9b45fb50618aa8053961f50bc8604b188d0ea79 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0174 – Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

https://notcve.org/view.php?id=CVE-2022-0174

10 Jan 2022 — Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr. dolibarr es vulnerable a Errores de Lógica de Negocio • https://github.com/dolibarr/dolibarr/commit/d892160f4f130385a3ce520f66cb8cf2eb8c5c32 • CWE-1284: Improper Validation of Specified Quantity in Input •

CVSS: 9.0EPSS: 5%CPEs: 1EXPL: 1

CVE-2020-35136

https://notcve.org/view.php?id=CVE-2020-35136

23 Dec 2020 — Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php. Dolibarr versión 12.0.3, es vulnerable a una Ejecución de Código Remota autenticada. Un atacante que tenga acceso al panel de administración puede manipular la función de copia de seguridad al insertar una carga útil en el nombre de ar... • http://bilishim.com/2020/12/18/zero-hunting-2.html • CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') •