CVE-2017-18260

No fix known EPSS 1%

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter).

Published 2018-04-11 · CVE record · OSV

Products: dolibarr_erp/crm

Affected upstream, no fix yet

Ecosystem	Package
Packagist	dolibarr/dolibarr

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix