PT-2026-32172

CVE-2019-25710

·

Published

2026-04-12

·

Updated

2026-10-08

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Dolibarr ERP-CRM version 8.0.4
Description An SQL injection flaw exists in the 'admin dict.php' endpoint. Attackers can execute arbitrary SQL queries and extract sensitive database information by injecting malicious code through the rowid POST parameter using error-based SQL injection techniques, which involve triggering database error messages to reveal data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2019-25710
GHSA-XXXG-X793-7FQ3
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com