Dolibarr: >> Dolibarr Erp/crm >> 16.0.3 Security Vulnerabilities
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.
CVSS Score
7.5
EPSS Score
0.149
Published
2023-06-13
Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.
CVSS Score
8.8
EPSS Score
0.821
Published
2023-05-29
Page 3