Description

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

Remediation

References

CVE-2018-19799

Related Vulnerabilities

Apache error log escape sequence injection vulnerability

WordPress Plugin Parcel Tracker eCourier Cross-Site Request Forgery (1.0.1)

SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17303)

Apache 2.x version older than 2.0.49

WordPress Plugin Shortcode Redirect 'domain' Parameter Cross-Site Scripting (1.0.01)

Severity

Medium

Classification

CVE-2018-19799 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities