Description
Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.9.93)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.31)
Oracle JRE CVE-2023-21830 Vulnerability (CVE-2023-21830)
Jboss EAP Improper Input Validation Vulnerability (CVE-2018-1000873)
ownCloud Improper Input Validation Vulnerability (CVE-2015-7699)