Beveiligingsadvies

CVE-2018-25357

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-23 18:32:14

Laatst bijgewerkt 2026-05-26 13:35:57

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the db_name parameter. Attackers can send a POST request to install/step1.php with malicious PHP code in the db_name parameter, then execute commands via the check.php endpoint using the cmd GET parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗