Dolibarr Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2017-18260 - Vulnerability Database

Dolibarr

Dolibarr Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2017-18260

High

Reference: CVE-2017-18260

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-18260

Title: Dolibarr Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Overview:

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter aka search_statut parameter).