CVE-2017-7886

Critical

Published: 10/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Dolibarr ERP/CRM version 4.0.4 has an SQL Injection vulnerability in doli/theme/eldy/style.css.php via the lang parameter.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update Dolibarr ERP/CRM to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.