CVE-2012-1225
Dolibarr < 3.2.0 - Authenticated SQL Injection via Memberslist or Rowid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-1225. PoCs published by Benjamin Kunz Mejri.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Dolibarr 3.2.0 Alpha, where the 'rowid' parameter in the URL is not properly sanitized. It includes a basic example of an exploit URL but lacks actual exploit code.
Description
Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.
Exploits (1)
The provided text describes an SQL injection vulnerability in Dolibarr 3.2.0 Alpha, where the 'rowid' parameter in the URL is not properly sanitized. It includes a basic example of an exploit URL but lacks actual exploit code.