Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Dolibarr — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Dolibarr, with AI-generated Chinese analysis, references, and POCs.

Vendor: dolibarr

CVE IDTitleCVSSSeverityPublished
CVE-2025-67486 Dolibarr has an Authenticated Remote Code Execution via eval() injection in user extrafields CWE-74--2026-05-08
CVE-2026-23500 Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration CWE-78 7.2AIHighAI2026-04-17
CVE-2026-34036 Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php CWE-98 6.5 Medium2026-03-31
CVE-2020-36966 Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site Scripting CWE-79 6.4 Medium2026-01-30
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability CWE-79 7.1 High2024-01-25
CVE-2021-25956 Improper User Access Control in "Dolibarr" Leads to Account Takeover CWE-284 4.7 Medium2021-08-17
CVE-2021-25957 Account Takeover in "Dolibarr" via Password Reset Functionality CWE-640 8.8 High2021-08-17
CVE-2021-25955 Stored XSS in “Dolibarr” leads to privilege escalation CWE-79 9.0 Critical2021-08-15
CVE-2021-25954 Improper Access Control in “Dolibarr” CWE-284 4.3 Medium2021-08-09
CVE-2013-2093 Dolibarr ERP/CRM 输入验证错误漏洞 9.8 -2019-11-20
CVE-2013-2092 Dolibarr ERP/CRM 跨站脚本漏洞 6.1 -2019-11-20
CVE-2013-2091 Dolibarr ERP/CRM SQL注入漏洞 9.8 -2019-11-20
CVE-2019-1010054 Dolibarr ERP/CRM 跨站请求伪造漏洞 8.8 -2019-07-18
CVE-2019-1010016 Dolibarr ERP/CRM 跨站脚本漏洞 6.1 -2019-07-15

All 14 known CVE vulnerabilities affecting Dolibarr with full Chinese analysis, references, and POCs where available.