Description

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

Remediation

References

CVE-2012-1225

Related Vulnerabilities

LimeSurvey Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-42903)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8903)

Sqlite CVE-2020-13631 Vulnerability (CVE-2020-13631)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)

TYPO3 Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-9508)

Severity

High

Classification

CVE-2012-1225 CWE-138

Tags

Missing Update Known Vulnerabilities