Security Advisory

CVE-2018-19994

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-01-03 19:00:00
Last updated 2024-08-05 11:51:18
Assigner mitre
State PUBLISHED

Description

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.