CVE-2019-25710
1 advisory.
Packagist/dolibarr/dolibarr CVE-2019-25710: high 8.2
Dolibarr has SQL injection vulnerability in the rowid parameter of the admin dict.php
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 8.0.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xxxg-x793-7fq3
- https://nvd.nist.gov/vuln/detail/CVE-2019-25710
- https://github.com/Dolibarr/dolibarr
- https://sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zip
- https://www.dolibarr.org
- https://www.exploit-db.com/exploits/46095
- https://www.vulncheck.com/advisories/dolibarr-erp-crm-sql-injection-via-rowid-parameter
CVE-2019-25710 · published · modified · JSON