CVE-2017-18260

Publication date

2018-04-11 03:00:00

Family

mitre

State

PUBLISHED

Description

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter).