Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-9838

Опубликовано: 11 апр. 2018
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting (XSS) vulnerabilities in versions before 5.0.4: index.php (leftmenu parameter), core/ajax/box.php (PATH_INFO), product/stats/card.php (type parameter), holiday/list.php (month_create, month_start, and month_end parameters), and don/card.php (societe, lastname, firstname, address, zipcode, town, and email parameters).

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*
Версия до 5.0.4 (исключая)

EPSS

Процентиль: 40%
0.00185
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2017-9838

CVSS3: 5.4
ubuntu
почти 8 лет назад

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting (XSS) vulnerabilities in versions before 5.0.4: index.php (leftmenu parameter), core/ajax/box.php (PATH_INFO), product/stats/card.php (type parameter), holiday/list.php (month_create, month_start, and month_end parameters), and don/card.php (societe, lastname, firstname, address, zipcode, town, and email parameters).

debian логотип

CVE-2017-9838

CVSS3: 5.4
debian
почти 8 лет назад

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scriptin ...

github логотип

GHSA-726g-cgcq-4xw8

CVSS3: 5.4
github
больше 3 лет назад

Dolibarr Cross-Site Scripting (XSS) vulnerability

EPSS

Процентиль: 40%
0.00185
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79