SQL injection - Code In dolibarr/dolibarr
Description
Dolibarr error-based SQL injection vulnerability in product/card.php An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
packagist | 8.0.4 |
Aliases
1. 2. 3. 4.
References
1.