CVE-2018-9019
Summary
| CVE | CVE-2018-9019 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-05-22 20:29:00 UTC |
| Updated | 2021-01-30 02:36:00 UTC |
| Description | SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php. |
Risk And Classification
Problem Types: CWE-89
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Dolibarr | Dolibarr | All | All | All | All |
| Application | Dolibarr | Dolibarr | All | All | All | All |
| Application | Oracle | Data Integrator | 11.1.1.9.0 | All | All | All |
| Application | Oracle | Data Integrator | 12.2.1.3.0 | All | All | All |
| Application | Oracle | Data Integrator | 12.2.1.4.0 | All | All | All |
| Application | Oracle | Data Integrator | 11.1.1.9.0 | All | All | All |
| Application | Oracle | Data Integrator | 12.2.1.3.0 | All | All | All |
| Application | Oracle | Data Integrator | 12.2.1.4.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| FIX CVE-2018-9019 · Dolibarr/dolibarr@83b762b · GitHub | CONFIRM | github.com | Patch |
| dolibarr/ChangeLog at 7.0.2 · Dolibarr/dolibarr · GitHub | CONFIRM | github.com | Release Notes |
| Oracle Critical Patch Update Advisory - January 2021 | MISC | www.oracle.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.