Description
A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
Remediation
References
Related Vulnerabilities
MySQL CVE-2021-2046 Vulnerability (CVE-2021-2046)
WordPress 6.0.x Shortcode Execution (6.0 - 6.0.4)
WordPress Plugin Manage Calameo Publications by Athlon Cross-Site Scripting (1.1.0)
Ruby Out-of-bounds Write Vulnerability (CVE-2017-11465)
WordPress Plugin Smush Image Compression and Optimization Multiple Vulnerabilities (2.9.1)