CVE-2015-8685

概要

参考情報

• packetstormsecurity.com/files/135256/dolibarr-HTML-Injection.html
• seclists.org/fulldisclosure/2016/Jan/40 · Exploit
• Dolibarr/dolibarr · Exploit
• GPCsolutions/dolibarr commit 0d31813

dolibarr のその他の脆弱性

• CVE-2021-42220中 5.4A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admi…
• CVE-2021-25957高 8.8In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker …
• CVE-2021-25956高 7.2In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other user’s details but fail…
• CVE-2021-25955緊急 9.0In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged applic…
• CVE-2021-25954中 4.3In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low pr…