CVE-2017-7886

CRITICAL9.8EPSS 0.21%

Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter

Published: 5/17/2022Modified: 4/24/2024
Also known as:GHSA-gw37-vmvw-f833

Description

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (3)