CVE-2012-10059
CRITICALDolibarr ERP/CRM <= 3.1.1-3.2.0 - Command Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-10059.
PoCs published by Nahuel Grisolia, Metasploit, including Metasploit module exploits/linux/http/dolibarr_cmd_exec.
AI-analyzed exploit summary This exploit demonstrates an OS command injection vulnerability in Dolibarr ERP & CRM versions <= 3.1.1 and <= 3.2.0. The PoC shows how an attacker can inject arbitrary commands via the 'sql_compat' parameter in the export.php script, leading to remote code execution.
Description
Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.
Exploits (3)
This exploit demonstrates an OS command injection vulnerability in Dolibarr ERP & CRM versions <= 3.1.1 and <= 3.2.0. The PoC shows how an attacker can inject arbitrary commands via the 'sql_compat' parameter in the export.php script, leading to remote code execution.
This Metasploit module exploits a post-authentication OS command injection vulnerability in Dolibarr ERP/CRM's backup feature via the sql_compat parameter in export.php. It authenticates, retrieves session tokens, and injects commands into the mysqldump process.
This Metasploit module exploits a post-authentication OS command injection vulnerability in Dolibarr ERP/CRM 3.1.1 via the sql_compat parameter in the backup feature. It authenticates, retrieves session tokens, and injects commands into the mysqldump export process.
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H