CVE-2024-5315
EUVD-2024-173924.05.2024, 10:15
Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in the database through the parameters viewstatut in /dolibarr/commande/list.php.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dolibarr | dolibarr_erp\/crm | 9.0.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| dolibarr | dolibarr | 9.0.1 | ADP |
Ubuntu Releases