CVE-2012-10059

This exploit demonstrates an OS command injection vulnerability in Dolibarr ERP & CRM versions <= 3.1.1 and <= 3.2.0. The PoC shows how an attacker can inject arbitrary commands via the 'sql_compat' parameter in the export.php script, leading to remote code execution.

This Metasploit module exploits a post-authentication OS command injection vulnerability in Dolibarr ERP/CRM's backup feature via the sql_compat parameter in export.php. It authenticates, retrieves session tokens, and injects commands into the mysqldump process.

This Metasploit module exploits a post-authentication OS command injection vulnerability in Dolibarr ERP/CRM 3.1.1 via the sql_compat parameter in the backup feature. It authenticates, retrieves session tokens, and injects commands into the mysqldump export process.