CVE-2018-19994

Name of the Vulnerable Software and Affected Versions Dolibarr version 8.0.2

Description The issue is related to an error-based SQL injection, allowing remote authenticated users to execute arbitrary SQL commands. This is achieved by manipulating the desiredstock parameter in the product/card.php file.

Recommendations For Dolibarr version 8.0.2, consider restricting access to the product/card.php file until a patch is available, and avoid using the desiredstock parameter in this context to minimize the risk of exploitation.