CVE-2012-1225

 

Published at: - 21-02-2012 02:31

Last modified: - 17-11-2022 06:21

Total changes: - 2

Description

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• 47969-Vendor Advisory
• 20120210 Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities-Exploit
• 79011-
• 51956-Exploit

 

Keywords

NVD

 

CVE-2012-1225

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures