Dolibarr has SQL injection vulnerability in the rowid parameter of the admin dict.php

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-25710 · ADVISORY
• Dolibarr/dolibarr · PACKAGE
• sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zip · WEB
• dolibarr.org · WEB
• exploit-db.com/exploits/46095 · WEB
• vulncheck.com/advisories/dolibarr-erp-crm-sql-injection-via-rowid-parameter · WEB
• dolibarr.org · Product

Mais vulnerabilidades de dolibarr/dolibarr

• CVE-2026-33944ALTO 8.8Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
• CVE-2026-10215MÉDIO 4.3A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file ht…
• CVE-2018-25357CRÍTICO 9.8Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by inj…
• CVE-2026-7689BAIXO 3.7A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library …
• CVE-2026-7688MÉDIO 5.0A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/cla…