CVE-2017-17897

Publication date

2017-12-24 18:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.