CVE-2017-17897

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Risk Assessment

Attackers may gain access to sensitive data or manipulate the database, leading to serious security implications for the organization.

Recommendation

It is recommended to update Dolibarr ERP/CRM to the latest version to eliminate this vulnerability and implement input data filtering in the application.

Original NVD description (English source)

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.