CVE-2013-2093

EUVD-2013-2067
Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
dolibarrdolibarr_erp\/crm
3.3.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dolibarr
bionic
dne
focal
dne
groovy
dne
trusty
dne
xenial
not-affected
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2013/05/14/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/84249
https://github.com/Dolibarr/dolibarr/commit/526a80dd202bbca396687a502d52c27e06e97fff
https://security-tracker.debian.org/tracker/CVE-2013-2093
http://www.openwall.com/lists/oss-security/2013/05/14/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/84249
https://github.com/Dolibarr/dolibarr/commit/526a80dd202bbca396687a502d52c27e06e97fff
https://security-tracker.debian.org/tracker/CVE-2013-2093