CVE-2017-9435

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-06-05

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Dolibarr (Dolibarr)

References

• https://github.com/Dolibarr/dolibarr/blob/develop/ChangeLog
• https://github.com/Dolibarr/dolibarr/commit/70636cc59ffa1ffbc0ce3dba315d7d9b837aad04