Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2013-2092

Disclosure Date: November 20, 2019 (last updated November 27, 2024)
Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php.
Attacker Value
Unknown

CVE-2013-2093

Disclosure Date: November 20, 2019 (last updated November 27, 2024)
Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.
Attacker Value
Unknown

CVE-2013-2091

Disclosure Date: November 20, 2019 (last updated November 27, 2024)
SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php.