CVE-2018-16809
No fix known EPSS 2%
An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
Products: dolibarr
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| Packagist | dolibarr/dolibarr |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | dolibarr | no fix |