Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-3935 · ADVISORY
• Dolibarr/dolibarr · WEB
• Dolibarr/dolibarr · WEB
• Dolibarr/dolibarr · WEB
• dolibarr/dolibarr commit a7f6bbd · WEB
• web.archive.org/web/20210122162903/http://www.securityfocus.com/bid/74926 · WEB
• packetstormsecurity.com/files/132108/Dolibarr-3.5-3.6-HTML-Injection.html · WEB
• seclists.org/fulldisclosure/2015/May/126 · WEB
• securityfocus.com/bid/74926
• GPCsolutions/dolibarr commit a7f6bbd

dolibarr/dolibarr のその他の脆弱性

• CVE-2026-33944高 8.8Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
• CVE-2026-10215中 4.3A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file ht…
• CVE-2018-25357緊急 9.8Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by inj…
• CVE-2026-7689低 3.7A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library …
• CVE-2026-7688中 5.0A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/cla…