Dolibarr ERP - CRM Vulnerabilities Allow SQL Injection

CVE-2024-5314

What is CVE-2024-5314?

The vulnerability in Dolibarr ERP - CRM versions, particularly 9.0.1, exposes the system to SQL injection attacks. An attacker could exploit this flaw by crafting malicious SQL queries directed at the parameters sortorder and sortfield in the /dolibarr/admin/dict.php file. By successfully exploiting this vulnerability, an attacker may gain unauthorized access to the database, potentially exposing sensitive information stored within. Addressing this vulnerability is crucial for maintaining the integrity and confidentiality of data managed by Dolibarr ERP - CRM.

References