CVE-2018-10094

Fixed upstream EPSS 70%

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

Published 2018-05-22 · CVE record · OSV

Products: dolibarr

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	7.0.2

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix