Search Results (103 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-2093 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 9.8 Critical
Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.
CVE-2013-2092 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php.
CVE-2013-2091 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 9.8 Critical
SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php.