Dolibarr SQL injection via type parameter in product/stats/card.php

높음 8.8CVE-2017-9839 · GHSA-84gh-4m36-cgqx · Published 11/04/2018 · updated 17/06/2026

요약

CVE-2017-9839은(는) dolibarr/dolibarr, dolibarr erp/crm (dolibarr)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.0%, 전체 취약점의 63.3%보다 높음.
조치: 5.0.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
dolibarr/dolibarr Packagist	`< 5.0.4`	`5.0.4`
dolibarr erp/crm dolibarr	`< 5.0.4`	`5.0.4`

Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter).

NVD description

Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 5.0.4

5.0.4

< 5.0.4

5.0.4

dolibarr/dolibarr의 다른 취약점

모두 보기 →