CVE

Id
52714  
CVE No.
CVE-2011-4802  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.  
Phase
Assigned (20111213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
559928 52714 CVE-2011-4802 BUGTRAQ:20111123 Multiple vulnerabilities in Dolibarr  View
559929 52714 CVE-2011-4802 URL:http://www.securityfocus.com/archive/1/archive/1/520619/100/0/threaded  View
559930 52714 CVE-2011-4802 MISC:https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.html  View
559931 52714 CVE-2011-4802 CONFIRM:https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91  View
559932 52714 CVE-2011-4802 CONFIRM:https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1  View
559933 52714 CVE-2011-4802 CONFIRM:https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535a  View
559934 52714 CVE-2011-4802 CONFIRM:https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675  View
559935 52714 CVE-2011-4802 BID:50777  View
559936 52714 CVE-2011-4802 URL:http://www.securityfocus.com/bid/50777  View
559937 52714 CVE-2011-4802 OSVDB:77340  View
559938 52714 CVE-2011-4802 URL:http://osvdb.org/77340  View
559939 52714 CVE-2011-4802 OSVDB:77341  View
559940 52714 CVE-2011-4802 URL:http://osvdb.org/77341  View
559941 52714 CVE-2011-4802 OSVDB:77342  View
559942 52714 CVE-2011-4802 URL:http://osvdb.org/77342  View
559943 52714 CVE-2011-4802 OSVDB:77343  View
559944 52714 CVE-2011-4802 URL:http://osvdb.org/77343  View
559945 52714 CVE-2011-4802 OSVDB:77344  View
559946 52714 CVE-2011-4802 URL:http://osvdb.org/77344  View
559947 52714 CVE-2011-4802 OSVDB:77345  View
559948 52714 CVE-2011-4802 URL:http://osvdb.org/77345  View
559949 52714 CVE-2011-4802 OSVDB:77346  View
559950 52714 CVE-2011-4802 URL:http://osvdb.org/77346  View
559951 52714 CVE-2011-4802 OSVDB:77347  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33133 JVNDB-2011-003373 phpAlbum の main.php におけるディレクトリトラバーサルの脆弱性 phpAlbum の main.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-4807 52714 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003373.html  View