CVE-2017-9435

Critical

Published: 05/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Dolibarr ERP/CRM versions before 5.0.3 are vulnerable to SQL injection in user/index.php, in the search_supervisor and search_statut parameters.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to upgrade Dolibarr ERP/CRM to version 5.0.3 or later to mitigate this vulnerability.

Original NVD description (English source)

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).