CVE-2017-9435

Fixed upstream EPSS 1%

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

Published 2017-06-05 · CVE record · OSV

Products: dolibarr

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	5.0.3

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix