Description
Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted POST requests with malicious SQL payloads in the elemid parameter to extract sensitive database information using error-based or time-based blind SQL injection techniques.
Remediation
References
Related Vulnerabilities
WordPress Plugin Image Metadata Cruncher Multiple Vulnerabilities (1.8)
Oracle Database Server CVE-2008-0341 Vulnerability (CVE-2008-0341)
WordPress Plugin aoringo CAT setter Cross-Site Scripting (0.1.1)
WordPress Plugin Nextend Facebook Connect Unspecified Vulnerability (1.5.7)
Apache HTTP Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3185)