CVE-2021-36625
31.03.2022, 18:15
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 (fixed version is 14.0.0) via a POST request to the country_id parameter in an UPDATE statement.
Vendor | Product | Version |
---|---|---|
dolibarr | dolibarr_erp\/crm | 13.0.2 |
𝑥
= Vulnerable software versions