PT-2011-5108 · Dolibarr · Dolibarr

Published 2011-12-14 · Updated 2023-02-02 · CVE-2011-4802

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dolibarr versions 3.1.0 RC and earlier

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including sortfield, sortorder, and sall parameters to "user/index.php" and "user/group/index.php", the id parameter to "info.php", "perms.php", "param ihm.php", "note.php", and "fiche.php" in the "user/" directory, and the rowid parameter to "admin/boxes.php".

Recommendations For Dolibarr versions 3.1.0 RC and earlier, consider restricting access to the vulnerable parameters sortfield, sortorder, sall, id, and rowid in the affected PHP files until a patch is available. As a temporary workaround, limit the execution of arbitrary SQL commands by implementing input validation and sanitization for these parameters.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-4802

Affected Products

Dolibarr

References · 19

• 🔥 https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1 · Exploit
• 🔥 https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91 · Exploit
• 🔥 https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675 · Exploit
• 🔥 https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535a · Exploit
• 🔥 http://osvdb.org/77346 · Exploit
• 🔥 https://exploit-db.com/exploits/36331 · Exploit
• 🔥 http://osvdb.org/77340 · Exploit
• 🔥 https://exploit-db.com/exploits/36332 · Exploit
• 🔥 https://exploit-db.com/exploits/36333 · Exploit
• 🔥 https://htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.html · Exploit
• 🔥 http://osvdb.org/77347 · Exploit
• 🔥 http://securityfocus.com/bid/50777 · Exploit
• 🔥 http://osvdb.org/77341 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4802 · Security Note
• http://osvdb.org/77345 · Note