Description

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.

Remediation

References

CVE-2018-19998

Related Vulnerabilities

WordPress Plugin WP Rocket Local File Inclusion (2.10.3)

WordPress Plugin Responsive Menu-Create Mobile-Friendly Menu Multiple Vulnerabilities (3.1.3)

MySQL CVE-2015-4802 Vulnerability (CVE-2015-4802)

MySQL CVE-2017-3641 Vulnerability (CVE-2017-3641)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2080)

Severity

High

Classification

CVE-2018-19998 CWE-138 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities