Dolibarr: >> Dolibarr Erp/crm >> 4.0.4 Security Vulnerabilities
Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter).
CVSS Score
8.8
EPSS Score
0.002
Published
2018-04-11
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.
CVSS Score
9.8
EPSS Score
0.002
Published
2017-05-10
Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-05-10
Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.
CVSS Score
9.8
EPSS Score
0.002
Published
2017-05-10
Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation.
CVSS Score
6.8
EPSS Score
0.0
Published
2017-05-10
Page 4