Beveiligingsadvies

CVE-2012-10059

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-13 20:33:50

Laatst bijgewerkt 2026-05-25 23:40:51

Toegewezen door VulnCheck

CVSS-score 9.4

Status PUBLISHED

Beschrijving

Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.

← Alle CVE's bekijken Bekijk op cve.org ↗