Dolibarr ERP - CRM Vulnerabilities Allow SQL Injection

CVE-2024-5314

What is CVE-2024-5314?

The vulnerability in Dolibarr ERP - CRM versions, particularly 9.0.1, exposes the system to SQL injection attacks. An attacker could exploit this flaw by crafting malicious SQL queries directed at the parameters sortorder and sortfield in the /dolibarr/admin/dict.php file. By successfully exploiting this vulnerability, an attacker may gain unauthorized access to the database, potentially exposing sensitive information stored within. Addressing this vulnerability is crucial for maintaining the integrity and confidentiality of data managed by Dolibarr ERP - CRM.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References