CVE-2019-25710

HIGH

8.2

CVSS Severity Score

EPSS Score0.0060%

EPSS Percentile44.30th

Published2026年4月12日

Last Modified2026年4月17日

Vulnerability Description

Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using error-based SQL injection techniques.

Affected Platforms (CPE)

📦

Dolibarr

Dolibarr Erp\/crm

<= 8.0.4

References & Advisories

🔗 https://sourceforge.net/projects/dolibarr/files/Dolibarr%20ERP-CRM/8.0.4/dolibarr-8.0.4.zip

🔗 https://www.dolibarr.org/

🔗 https://www.exploit-db.com/exploits/46095

🔗 https://www.vulncheck.com/advisories/dolibarr-erp-crm-sql-injection-via-rowid-parameter

Vulnerability Description

Affected Platforms (CPE)

Dolibarr Erp\/crm

References & Advisories

関連する脆弱性情報