~ / search / GHSA-8v7v-6mmm-xjxm

GHSA-8v7v-6mmm-xjxm

Dolibarr SQL injection vulnerability in accountancy/customer/card.php

Source: GitHub Advisory Database (reviewed) High CVE-2020-14443

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 11.0.5 11.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.4 and below allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

References

External links from the advisory. They lead to third-party sites.