Description
Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter).
Remediation
References
Related Vulnerabilities
WordPress Plugin CM Ad Changer Cross-Site Scripting (1.7.7)
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5493)
WordPress Plugin Nextend Google Connect Unspecified Vulnerability (1.5.3)
Python Other Vulnerability (CVE-2016-3189)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4289)