Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through POST parameters. Attackers can inject malicious SQL through parameters like actioncode, demand_reason_id, and availability_id in card.php endpoints to extract sensitive database information using boolean-based blind, error-based, and time-based blind techniques.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-27 | 1 | Disclosure1 |
| 2026-03-23 | 1 | General1 |
📌 Top CVEs recientes (CVSS>=7.0): 1. 💉 CVE-2019-25455 (CVSS: 7.5) 2. 💉 CVE-2019-25452 (CVSS: 7.5) 3. 💉 CVE-2019-25450 (CVSS: 7.5) 4. 💉 CVE-2019-25446 (CVSS: 8.2) 5. 💉 CVE-2019-25443 (CVSS: 8.2) #CyberSecurity #CVE #Infosec
Post summary
The post merely announces a list of five recent CVEs with their CVSS scores, providing no additional technical, exploit, or patch information.
CVE-2019-25450 (CVSS:7.1, HIGH) is Analyzed. Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate..https://nvd.nist.gov/vuln/detail/CVE-2019-25450 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post discloses that Dolibarr ERP/CRM 10.0.1 is vulnerable to SQL injection (CVE‑2019‑25450) with a CVSS score of 7.1, noting that authenticated attackers can manipulate data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dolibarr | dolibarr_erp\/crm | 10.0.1 | - | - |