PT-2018-9675

CVE-2018-10094

Published

2018-05-22

Updated

2022-05-14

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Dolibarr versions prior to 7.0.2

Description: The issue allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

Recommendations: For versions prior to 7.0.2, update to version 7.0.2 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-57WJ-22W9-WM9R

Found an issue in the description? Have something to add? Feel free to write us 👾