Описание
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| dolibarr | removed | package |
Примечания
https://github.com/Dolibarr/dolibarr/issues/9449
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 7 лет назад
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
CVSS3: 9.8
nvd
больше 7 лет назад
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
CVSS3: 9.8
github
больше 4 лет назад
Dolibarr SQL injection via the integer parameters qty and value_unit