Description Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter). Remediation References CVE-2017-9839 Related Vulnerabilities PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-3172) WordPress Plugin WordPress Console Security Bypass (0.3.9) Joomla Missing Authorization Vulnerability (CVE-2020-10239) WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Cross-Site Scripting (1.4.9.5) MySQL Resource Management Errors Vulnerability (CVE-2010-3833) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2017-9839