CVE-2018-10094: SQL Injection
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-10094?
CVE-2018-10094 is a SQL injection vulnerability in Dolibarr before 7.0.2.
How severe is CVE-2018-10094?
CVE-2018-10094 has a severity level of 9.8 (critical).
What is the affected software for CVE-2018-10094?
The affected software is Dolibarr version up to 7.0.2.
How can remote attackers exploit CVE-2018-10094?
Remote attackers can exploit CVE-2018-10094 by executing arbitrary SQL commands via vectors involving integer parameters without quotes.
Are there any references for more information about CVE-2018-10094?
Yes, you can find more information about CVE-2018-10094 at the following references: [http://www.openwall.com/lists/oss-security/2018/05/21/1](http://www.openwall.com/lists/oss-security/2018/05/21/1), [https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog](https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog), [https://github.com/Dolibarr/dolibarr/commit/7ade4e37f24d6859987bb9f6232f604325633fdd](https://github.com/Dolibarr/dolibarr/commit/7ade4e37f24d6859987bb9f6232f604325633fdd).