SQL Injection

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Dolibarr ERP CMS `list.php` - SQL InjectionCVE-2024-5315Dolibarr · CVSS 9.1 · 35% likely

   CWE-89

2. SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.CVE-2018-10094Dolibarr · 69% likely

   CWE-89

3. Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sort…CVE-2011-4802Dolibarr · 5.3% likely

   CWE-89

4. SQL Injection in dolibarr/dolibarrCVE-2022-4093dolibarr · CVSS 8.1 · 4.3% likely

   CWE-89

5. SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmod…CVE-2018-9019Dolibarr · 3.8% likely

   CWE-89

6. SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php.CVE-2013-2091dolibarr · 2.5% likely

   CWE-89

7. Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter…CVE-2012-1225Dolibarr · 2.4% likely

   CWE-89

8. An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.CVE-2018-16809Dolibarr · 2.3% likely

   CWE-89

9. SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.CVE-2018-19998Dolibarr · 2.2% likely

   CWE-89

10. Dolibarr ERP/CRM before 10.0.3 allows SQL Injection.CVE-2019-19209Dolibarr · 2.1% likely

    CWE-89

11. SQL Injection in dolibarr/dolibarrCVE-2022-0224dolibarr · CVSS 8.3 · 2.0% likely

    CWE-89

12. An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock p…CVE-2018-19994Dolibarr · 2.0% likely

    CWE-89

13. Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) entity parameter in an update actio…CVE-2014-3992Dolibarr · 2.0% likely

    CWE-89

14. SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter.CVE-2018-13447Dolibarr · 1.9% likely

    CWE-89

15. SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the status_batch parameter.CVE-2018-13450Dolibarr · 1.9% likely

    CWE-89

16. SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut_buy parameter.CVE-2018-13449Dolibarr · 1.9% likely

    CWE-89

17. SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.CVE-2018-13448Dolibarr · 1.9% likely

    CWE-89

18. SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.CVE-2017-17900Dolibarr · 1.9% likely

    CWE-89

19. SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.CVE-2017-17899Dolibarr · 1.9% likely

    CWE-89

20. SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2017-17897Dolibarr · 1.9% likely

    CWE-89

21. Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.CVE-2017-7886Dolibarr · 1.7% likely

    CWE-89

22. Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) contactid parameter in an ad…CVE-2014-7137Dolibarr · 1.7% likely

    CWE-89

23. Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).CVE-2017-9435Dolibarr · 1.5% likely

    CWE-89

24. SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter.CVE-2017-14242Dolibarr · 1.3% likely

    CWE-89

25. SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter.CVE-2017-14238Dolibarr · 1.3% likely

    CWE-89

26. A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter.CVE-2020-14443Dolibarr · 1.1% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.