CVE-2018-10094
CRITICALDolibarr < 7.0.2 - SQL Injection via Integer Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2018-10094.
PoCs published by Sysdream, Issam Rabhi, Kevin Locati, Shelby Pace, including Metasploit module auxiliary/gather/dolibarr_creds_sqli.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Dolibarr ERP & CRM (CVE-2018-10094) by bypassing input validation through URL encoding. The PoC retrieves the database version by injecting a UNION-based SQL query into the 'statut' parameter.
Description
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Dolibarr ERP & CRM (CVE-2018-10094) by bypassing input validation through URL encoding. The PoC retrieves the database version by injecting a UNION-based SQL query into the 'statut' parameter.
This Metasploit module exploits a SQL injection vulnerability in Dolibarr ERP/CRM to extract usernames and encrypted passwords from the database. It requires authenticated access and targets a known CVE from 2018.
References (5)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H