Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.
dolibarr dolibarr erp\\/crm 4.0.4