Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

ERP

Dolibarr

Dolibarr is a software built by modules addition to manage small or medium companies freelancers or foundations. Dolibarr is an OpenSource project base on a WAMP MAMP or LAMP server.

Official Site:

https://www.dolibarr.org/

Severity Summary:

Critical: 31 High: 38 Medium: 67 Low: 3
Reference
Title
Severity
CVE-2019-25450
Dolibarr Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2021-25956
Dolibarr Improper Authentication Vulnerability
High
CVE-2019-1010054
Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2023-38887
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability
High
CVE-2023-4197
Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
High
CVE-2023-38886
Dolibarr Vulnerability
High
CVE-2018-19998
Dolibarr Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2024-29477
Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability
High
CVE-2018-19994
Dolibarr Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2023-5323
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-81729
Dolibarr Incorrect Authorization Vulnerability
Medium
CVE-2026-89012
Dolibarr Improper Handling of Case Sensitivity Vulnerability
Medium
CVE-2021-33618
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-22293
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-42220
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-0174
Dolibarr Improper Input Validation Vulnerability
Medium
CVE-2022-30875
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-0746
Dolibarr Other Vulnerability
Medium
CVE-2023-4198
Dolibarr Missing Authorization Vulnerability
Medium
CVE-2022-0414
Dolibarr Other Vulnerability
Medium
CVE-2023-5842
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-34036
Dolibarr Improper Control of Filename for Include/Require Statement in PHP Program (PHP Remote File Inclusio Vulnerability
Medium
CVE-2021-47779
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-23817
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-3991
Dolibarr Authorization Bypass Through User-Controlled Key Vulnerability
Medium
CVE-2022-2060
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-0731
Dolibarr Incorrect Authorization Vulnerability
Medium
CVE-2017-9838
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-25954
Dolibarr Incorrect Authorization Vulnerability
Medium
CVE-2019-19206
Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium