Dolibarr vulnerabilities
64 CVEs and advisories name Dolibarr as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-25954Improper Access Control in “Dolibarr”
- CVE-2013-2093Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute a
- CVE-2013-2092Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php.
- CVE-2013-2091SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in