Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2018-19992

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to adherents/type.php.
0
0
Attacker Value
Unknown

CVE-2018-19998

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.
0
0
Attacker Value
Unknown

CVE-2018-19995

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to user/card.php.
0
0
Attacker Value
Unknown

CVE-2018-19994

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.
0
0
Attacker Value
Unknown

CVE-2018-19993

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php.
0
0