CVE-2024-5315: Multiple vulnerabilities in DOLIBARR's ERP CMS
Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in the database through the parameters
viewstatut in /dolibarr/commande/list.php.
Other sources
Vulnerabilities in Dolibarr ERP - CRM that affect version 9.0.1 and allow SQL injection. These vulnerabilities could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in the database through the parameters in /dolibarr/commande/list.php.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5315?
CVE-2024-5315 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2024-5315?
To fix CVE-2024-5315, you should upgrade Dolibarr ERP - CRM to a version later than 9.0.1.
What software is affected by CVE-2024-5315?
CVE-2024-5315 affects Dolibarr ERP - CRM version 9.0.1 and below.
What kind of attack does CVE-2024-5315 allow?
CVE-2024-5315 allows a remote attacker to perform SQL injection attacks on the vulnerable system.
What information could be compromised by CVE-2024-5315?
CVE-2024-5315 could allow an attacker to retrieve all information stored in the database.