Логотип exploitDog
bind:CVE-2011-4802
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2011-4802

Количество 3

Количество 3

nvd логотип

CVE-2011-4802

около 14 лет назад

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.

CVSS2: 6.5
EPSS: Низкий
debian логотип

CVE-2011-4802

около 14 лет назад

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probab ...

CVSS2: 6.5
EPSS: Низкий
github логотип

GHSA-m47c-vx53-g89g

больше 3 лет назад

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2011-4802

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.

CVSS2: 6.5
3%
Низкий
около 14 лет назад
debian логотип
CVE-2011-4802

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probab ...

CVSS2: 6.5
3%
Низкий
около 14 лет назад
github логотип
GHSA-m47c-vx53-g89g

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.

3%
Низкий
больше 3 лет назад

Уязвимостей на страницу