CVE-2018-19994

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands…

published January 3, 2019

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02032 · 80.9th percentile
Published
2019-01-03T19:00Z
EPSS history
Timeline
  • 03 JAN 19:00Z
    An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands…
    cvelistv5