jetlib.sec » Tags » dolibarr

Feeds

133357 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

35 items tagged "dolibarr"

Related tags: site [+], day [+], inclusion [+], crm [+], cms [+], alpha [+], sql injection [+], operating system [+], multiple [+], injection [+], file [+], database backup [+], backup feature [+], arbitrary files [+], arbitrary code execution [+], alpha sql [+], vulnerabilities [+], webapps [+], php [+], fiche [+], directory traversal [+], directory [+], cross site scripting [+], bugtraq [+], adherents [+], vulnerability [+], erp [+], cross [+]

• April 09, 2012
• 18:35

  Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a vulnerability found in Dolibarr ERP/CRM's backup feature. This software is used to manage a company's business information such as contacts, invoices, orders, stocks, agenda, etc. When processing a database backup request, the export.php function does not check the input given to the sql_compat parameter, which allows a remote authenticated attacker to inject system commands into it, and then gain arbitrary code execution.

  Tags:  crm erp dolibarr arbitrary-code-execution backup-feature database-backup  

• 18:35

  Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a vulnerability found in Dolibarr ERP/CRM's backup feature. This software is used to manage a company's business information such as contacts, invoices, orders, stocks, agenda, etc. When processing a database backup request, the export.php function does not check the input given to the sql_compat parameter, which allows a remote authenticated attacker to inject system commands into it, and then gain arbitrary code execution.

  Tags:  crm erp dolibarr arbitrary-code-execution backup-feature database-backup  

• 18:35

  Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a vulnerability found in Dolibarr ERP/CRM's backup feature. This software is used to manage a company's business information such as contacts, invoices, orders, stocks, agenda, etc. When processing a database backup request, the export.php function does not check the input given to the sql_compat parameter, which allows a remote authenticated attacker to inject system commands into it, and then gain arbitrary code execution.

  Tags:  crm erp dolibarr arbitrary-code-execution backup-feature database-backup  

• 14:00

  [webapps / 0day] - Dolibarr ERP & CRM OS Command Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP & CRM OS Command Injection

  Tags:  erp day dolibarr  

• 14:00

  [webapps / 0day] - Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

  Tags:  erp day dolibarr  

• 14:00

  [webapps / 0day] - Dolibarr ERP & CRM OS Command Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP & CRM OS Command Injection

  Tags:  erp day dolibarr  

• 14:00

  [webapps / 0day] - Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP & CRM 3 Post-Auth OS Command Injection

  Tags:  erp day dolibarr  

• April 07, 2012
• 14:00

  [webapps / 0day] - Dolibarr ERP / CRM OS Command Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP / CRM OS Command Injection

  Tags:  erp day dolibarr  

• 14:00

  [webapps / 0day] - Dolibarr ERP / CRM OS Command Injection

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP / CRM OS Command Injection

  Tags:  erp day dolibarr  

• April 06, 2012
• 19:02

  Dolibarr ERP / CRM OS Command Injection

   » ‎ Packet Storm Security Exploits
  Dolibarr ERP and CRM suffers from an operating system command injection vulnerability. Versions 3.1.1 and below and 3.2.0 and below are affected.

  Tags:  crm erp dolibarr vulnerability operating-system  

• 19:02

  Dolibarr ERP / CRM OS Command Injection

   » ‎ Packet Storm Security Recent Files
  Dolibarr ERP and CRM suffers from an operating system command injection vulnerability. Versions 3.1.1 and below and 3.2.0 and below are affected.

  Tags:  crm erp dolibarr vulnerability operating-system  

• 19:02

  Dolibarr ERP / CRM OS Command Injection

   » ‎ Packet Storm Security Misc. Files
  Dolibarr ERP and CRM suffers from an operating system command injection vulnerability. Versions 3.1.1 and below and 3.2.0 and below are affected.

  Tags:  crm erp dolibarr vulnerability operating-system  

• February 27, 2012
• 0:00

  Vuln: Dolibarr Multiple Directory Traversal Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Dolibarr Multiple Directory Traversal Vulnerabilities

  Tags:  directory multiple dolibarr directory-traversal  

• February 22, 2012
• 0:00

  Vuln: Dolibarr 'adherents/fiche.php' SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Dolibarr 'adherents/fiche.php' SQL Injection Vulnerability

  Tags:  php fiche dolibarr sql-injection adherents vulnerability  

• February 10, 2012
• 22:05

  Dolibarr CMS 3.2.0 Alpha SQL Injection

   » ‎ Packet Storm Security Exploits
  Dolibarr CMS version 3.2.0 Alpha suffers from a remote SQL injection vulnerability.

  Tags:  injection cms dolibarr alpha-sql alpha sql-injection vulnerability  

• 22:05

  Dolibarr CMS 3.2.0 Alpha SQL Injection

   » ‎ Packet Storm Security Recent Files
  Dolibarr CMS version 3.2.0 Alpha suffers from a remote SQL injection vulnerability.

  Tags:  injection cms dolibarr alpha-sql alpha sql-injection vulnerability  

• 22:05

  Dolibarr CMS 3.2.0 Alpha SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Dolibarr CMS version 3.2.0 Alpha suffers from a remote SQL injection vulnerability.

  Tags:  injection cms dolibarr alpha-sql alpha sql-injection vulnerability  

• 22:02

  Dolibarr CMS 3.2.0 Alpha Local File Inclusion

   » ‎ Packet Storm Security Exploits
  Dolibarr CMS version 3.2.0 Alpha suffers from multiple local file inclusion vulnerabilities.

  Tags:  alpha cms dolibarr inclusion  

• 22:02

  Dolibarr CMS 3.2.0 Alpha Local File Inclusion

   » ‎ Packet Storm Security Recent Files
  Dolibarr CMS version 3.2.0 Alpha suffers from multiple local file inclusion vulnerabilities.

  Tags:  alpha cms dolibarr inclusion  

• 22:02

  Dolibarr CMS 3.2.0 Alpha Local File Inclusion

   » ‎ Packet Storm Security Misc. Files
  Dolibarr CMS version 3.2.0 Alpha suffers from multiple local file inclusion vulnerabilities.

  Tags:  alpha cms dolibarr inclusion  

• December 15, 2011
• 0:00

  Vuln: Dolibarr Multiple Cross Site Scripting and SQL Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Dolibarr Multiple Cross Site Scripting and SQL Injection Vulnerabilities

  Tags:  cross multiple dolibarr cross-site-scripting  

• November 23, 2011
• 15:47

  Dolibarr 3.1.0 RC Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Exploits
  Dolibarr version 3.1.0 RC suffers from cross site scripting and remote SQL injection vulnerabilities.

  Tags:  cross site dolibarr  

• 15:47

  Dolibarr 3.1.0 RC Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Recent Files
  Dolibarr version 3.1.0 RC suffers from cross site scripting and remote SQL injection vulnerabilities.

  Tags:  cross site dolibarr  

• 15:47

  Dolibarr 3.1.0 RC Cross Site Scripting / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Dolibarr version 3.1.0 RC suffers from cross site scripting and remote SQL injection vulnerabilities.

  Tags:  cross site dolibarr  

• 9:04

  Bugtraq: Multiple vulnerabilities in Dolibarr

   » ‎ SecurityFocus Vulnerabilities
  Multiple vulnerabilities in Dolibarr

  Tags:  bugtraq multiple dolibarr vulnerabilities  

• November 09, 2011
• 8:22

  Dolibarr 3.1.0 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Dolibarr version 3.1.0 suffers from multiple cross site scripting vulnerabilities.

  Tags:  cross site dolibarr  

• 8:22

  Dolibarr 3.1.0 Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  Dolibarr version 3.1.0 suffers from multiple cross site scripting vulnerabilities.

  Tags:  cross site dolibarr  

• 8:22

  Dolibarr 3.1.0 Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  Dolibarr version 3.1.0 suffers from multiple cross site scripting vulnerabilities.

  Tags:  cross site dolibarr  

• April 22, 2011
• 14:00

  [webapps / 0day] - Dolibarr ERP/CRM 3.0.0 Multiple Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Dolibarr ERP/CRM 3.0.0 Multiple Vulnerabilities

  Tags:  day dolibarr webapps vulnerabilities  

• April 21, 2011
• 17:24

  Dolibarr 3.0.0 Local File Inclusion

   » ‎ Packet Storm Security Exploits
  A local file inclusion vulnerability in Dolibarr version 3.0.0 can be exploited to include arbitrary files.

  Tags:  inclusion file dolibarr arbitrary-files vulnerability  

• 17:24

  Dolibarr 3.0.0 Local File Inclusion

   » ‎ Packet Storm Security Recent Files
  A local file inclusion vulnerability in Dolibarr version 3.0.0 can be exploited to include arbitrary files.

  Tags:  inclusion file dolibarr arbitrary-files vulnerability  

• 17:24

  Dolibarr 3.0.0 Local File Inclusion

   » ‎ Packet Storm Security Misc. Files
  A local file inclusion vulnerability in Dolibarr version 3.0.0 can be exploited to include arbitrary files.

  Tags:  inclusion file dolibarr arbitrary-files vulnerability  

• 17:23

  Dolibarr 3.0.0 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  A reflected cross site scripting vulnerability in Dolibarr version 3.0.0 can be exploited to execute arbitrary JavaScript.

  Tags:  cross site dolibarr vulnerability  

• 17:23

  Dolibarr 3.0.0 Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  A reflected cross site scripting vulnerability in Dolibarr version 3.0.0 can be exploited to execute arbitrary JavaScript.

  Tags:  cross site dolibarr vulnerability  

• 17:23

  Dolibarr 3.0.0 Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  A reflected cross site scripting vulnerability in Dolibarr version 3.0.0 can be exploited to execute arbitrary JavaScript.

  Tags:  cross site dolibarr vulnerability