Description

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

Remediation

References

CVE-2012-1225

Related Vulnerabilities

WordPress Plugin Hero Maps Premium Cross-Site Scripting (2.2.1)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-1492)

WordPress Plugin Payment Form for PayPal Pro SQL Injection (1.1.64)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14820)

Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514)

Severity

High

Classification

CVE-2012-1225 CWE-138

Tags

Missing Update Known Vulnerabilities