CVE-2018-25357: Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php
Dolibarr ERP CRM 7.0.3 contains a remote code evaluation vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the dbname parameter. Attackers can send a POST request to install/step1.php with malicious PHP code in the dbname parameter, then execute commands via the check.php endpoint using the cmd GET parameter.
Other sources
Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the dbname parameter. Attackers can send a POST request to install/step1.php with malicious PHP code in the dbname parameter, then execute commands via the check.php endpoint using the cmd GET parameter.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-25357?
CVE-2018-25357 has a critical severity score of 9.8.
How do I fix CVE-2018-25357?
To fix CVE-2018-25357, upgrade to a version of Dolibarr ERP CRM that addresses this vulnerability.
What does CVE-2018-25357 affect?
CVE-2018-25357 affects Dolibarr ERP CRM version 7.0.3.
What type of vulnerability is CVE-2018-25357?
CVE-2018-25357 is a remote code execution vulnerability due to code injection.
Who can exploit CVE-2018-25357?
CVE-2018-25357 can be exploited by unauthenticated attackers through crafted POST requests.