Dolibarr ERP and CRM HTML Injection

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-17223 · ADVISORY
• Dolibarr/dolibarr commit c7736dd · WEB
• Dolibarr/dolibarr · PACKAGE
• medium.com/@k43p/cve-2019-17223-stored-html-injection-dolibarr-crm-erp-ad1e064d0ca5 · WEB
• security.snyk.io/vuln/SNYK-PHP-DOLIBARRDOLIBARR-473217 · WEB
• medium.com/%40k43p/cve-2019-17223-stored-html-injection-dolibarr-crm-erp-ad1e064d0ca5
• dolibarr.org/forum/dolibarr-changelogs · Release Notes

Lỗ hổng khác của dolibarr/dolibarr

• CVE-2026-33944CAO 8.8Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
• CVE-2026-10215TRUNG BÌNH 4.3A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file ht…
• CVE-2018-25357NGHIÊM TRỌNG 9.8Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by inj…
• CVE-2026-7689THẤP 3.7A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library …
• CVE-2026-7688TRUNG BÌNH 5.0A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/cla…