CVE-2015-8685

Mô tả

Tham khảo

• packetstormsecurity.com/files/135256/dolibarr-HTML-Injection.html
• seclists.org/fulldisclosure/2016/Jan/40 · Exploit
• Dolibarr/dolibarr · Exploit
• GPCsolutions/dolibarr commit 0d31813

Lỗ hổng khác của dolibarr

• CVE-2021-42220TRUNG BÌNH 5.4A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admi…
• CVE-2021-25957CAO 8.8In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker …
• CVE-2021-25956CAO 7.2In “Dolibarr” application, v3.3.beta1_20121221 to v13.0.2 have “Modify” access for admin level users to change other user’s details but fail…
• CVE-2021-25955NGHIÊM TRỌNG 9.0In “Dolibarr ERP CRM”, WYSIWYG Editor module, v2.8.1 to v13.0.2 are affected by a stored XSS vulnerability that allows low privileged applic…
• CVE-2021-25954TRUNG BÌNH 4.3In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low pr…