CVE-2018-13450

Fixed upstream EPSS 2%

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the status_batch parameter.

Published 2018-07-08 · CVE record · OSV

Products: dolibarr_erp/crm

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	7.0.4

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix