Dolibarr CVE-2014-7137 Multiple SQL Injection Vulnerabilities
BID:71189
Info
Dolibarr CVE-2014-7137 Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 71189 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-7137 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 19 2014 12:00AM |
| Updated: | Nov 19 2014 12:00AM |
| Credit: | Jerzy Kramarz |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Dolibarr CVE-2014-7137 Multiple SQL Injection Vulnerabilities
Dolibarr is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
An attacker can exploit these issues to compromise the affected application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dolibarr 3.5.3 is vulnerable; other versions may also be affected.
Dolibarr is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
An attacker can exploit these issues to compromise the affected application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dolibarr 3.5.3 is vulnerable; other versions may also be affected.
Solution / Fix
Dolibarr CVE-2014-7137 Multiple SQL Injection Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Dolibarr CVE-2014-7137 Multiple SQL Injection Vulnerabilities
References:
References:
- Dolibarr Homepage ( Dolibarr ERP/CRM)
- Vulnerability title: Multiple SQL Injections in Dolibarr ERP & CRM Dolibarr ERP (Portcullis Computer Security)