Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2015-3935

Published: 10/06/2015 Updated: 06/12/2016
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Dolibarr

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote malicious users to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.php.

Vulnerable Product Search on Vulmon Subscribe to Product

dolibarr dolibarr 3.6.0

dolibarr dolibarr 3.5.0

Exploits

Exploit DB: Dolibarr 3.5 / 3.6 HTML Injection
Dolibarr versions 35 and 36 suffer from an html injection vulnerability ...

References

CWE-79http://seclists.org/fulldisclosure/2015/May/126https://github.com/Dolibarr/dolibarr/issues/2857https://github.com/GPCsolutions/dolibarr/commit/a7f6bbd316e9b96216e9b2c7a065c9251c9a8907http://packetstormsecurity.com/files/132108/Dolibarr-3.5-3.6-HTML-Injection.htmlhttp://www.securityfocus.com/bid/74926https://nvd.nist.govhttps://packetstormsecurity.com/files/132108/Dolibarr-3.5-3.6-HTML-Injection.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook