CVE-2011-4802

Dolibarr < 3.1.0 - Authenticated SQL Injection via Multiple Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2011-4802. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in Dolibarr 3.1.0 RC, including a basic example of an SQL injection payload. However, it lacks executable exploit code.

Description

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index.php; the id parameter to (4) info.php, (5) perms.php, (6) param_ihm.php, (7) note.php, and (8) fiche.php in user/; and (9) rowid parameter to admin/boxes.php.

Exploits (3)

exploitdb WRITEUP VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/36332

The provided text describes SQL injection and XSS vulnerabilities in Dolibarr 3.1.0 RC, including a basic example of an SQL injection payload. However, it lacks executable exploit code.

Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Dolibarr 3.1.0 RC
No auth needed
Prerequisites: Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/36331

The provided text describes SQL injection and XSS vulnerabilities in Dolibarr 3.1.0 RC, with example URLs demonstrating potential exploitation vectors. It does not contain executable exploit code but outlines attack methods.

Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target: Dolibarr 3.1.0 RC
No auth needed
Prerequisites: Access to vulnerable Dolibarr instance
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/36333

The provided text describes SQL injection and XSS vulnerabilities in Dolibarr 3.1.0 RC due to improper input sanitization. It includes a sample URL demonstrating SQL injection via the 'rowid' parameter but lacks executable exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Dolibarr 3.1.0 RC
No auth needed
Prerequisites: Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (15)

Core 15
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/520619/100/0/threaded
Broken Link, Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/77346
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/77340
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/77341
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/77345
Broken Link, Exploit vdb-entry x_refsource_osvdb
http://osvdb.org/77347
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/77344
Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/50777
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/77343
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/77342

Scores

EPSS 0.0567
EPSS Percentile 92.0%

Details

CWE
CWE-89
Status published
Products (11)
dolibarr/dolibarr_erp\/crm 2.5.0
dolibarr/dolibarr_erp\/crm 2.6.0
dolibarr/dolibarr_erp\/crm 2.6.1
dolibarr/dolibarr_erp\/crm 2.7.0
dolibarr/dolibarr_erp\/crm 2.7.1
dolibarr/dolibarr_erp\/crm 2.8.0
dolibarr/dolibarr_erp\/crm 2.8.1
dolibarr/dolibarr_erp\/crm 2.9.0
dolibarr/dolibarr_erp\/crm 3.0.0
dolibarr/dolibarr_erp\/crm 3.0.1
... and 1 more
Published Dec 14, 2011
Tracked Since Feb 18, 2026