NVD

Id
11141  
Name
CVE-2011-4802  
Description
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-13  
Modified Date
2012-03-05  
Seq
2011-4802  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61791 11141 CVE-2011-4802 20111123 Multiple vulnerabilities in Dolibarr  View
61792 11141 CVE-2011-4802 50777  View
61793 11141 CVE-2011-4802 https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91  View
61794 11141 CVE-2011-4802 https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1  View
61795 11141 CVE-2011-4802 https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535a  View
61796 11141 CVE-2011-4802 https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675  View
61797 11141 CVE-2011-4802 https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33109 JVNDB-2011-003349 Dolibarr における SQL インジェクションの脆弱性 Dolibarr には、SQL インジェクションの脆弱性が存在します。 CVE-2011-4802 52709 CVE-2011-4802 11141 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003349.html 2011-11-03 2011-12-16 View