CVE-2017-18260: SQL Injection
Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propalstatut parameter, aka searchstatut parameter).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-18260?
CVE-2017-18260 is classified as a high severity vulnerability due to its exploitation potential via SQL injection.
How can I fix CVE-2017-18260?
To fix CVE-2017-18260, it's recommended to upgrade Dolibarr ERP/CRM to version 7.1.0 or later.
What software versions are affected by CVE-2017-18260?
CVE-2017-18260 affects all Dolibarr ERP/CRM versions up to and including 7.0.0.
What types of attacks can be executed through CVE-2017-18260?
CVE-2017-18260 allows for SQL injection attacks, which can lead to unauthorized access to database information.
What specific parameters are involved in CVE-2017-18260?
The vulnerability in CVE-2017-18260 is triggered by the 'viewstatut' and 'propal_statut' parameters in the file comm/propal/list.php.