cbcvebase.

Dolibarr Project Erp Crm vulnerabilities

1 known vulnerability affecting dolibarr_project/erp_crm.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2012-10059P2CRITICALCVSS 9.4PoC≤ 3.2.02025-08-13
CVE-2012-10059 [CRITICAL] CWE-78 CVE-2012-10059: Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vu Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.
nvd
Dolibarr Project Erp Crm vulnerabilities | cvebase