dolibarr dolibarr CVE-2018-9019 in Dolibarr and Oracle Products
Published on May 22, 2018

product logo product logo
SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php.

NVD


Products Associated with CVE-2018-9019

stack.watch emails you whenever new vulnerabilities are published in Dolibarr or Oracle Data Integrator. Just hit a watch button to start following.

Dolibarr
 
Oracle Data Integrator
 

Exploit Probability

EPSS
2.00%
Percentile
83.40%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.