{"id":"ghsa-ghsa-v5fq-cf5m-vwv7","seq":1708834,"kind":"advisory","title":"Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter","url":"https://github.com/advisories/GHSA-v5fq-cf5m-vwv7","permalink":"https://vulnpulse.app/items/ghsa-ghsa-v5fq-cf5m-vwv7","summary":"影響: composer:dolibarr/dolibarr <= 23.0.0\nA SQL Injection vulnerability exists in the Third Party (Company) update functionality of Dolibarr ERP/CRM. The localtax1_value parameter (lt1) is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or parameterized query binding. An authenticated user with standard \"Third Party: Create/Edit\" permission can extract any data from the database, including password hashes, API keys, and all business data. Tested on D…","severity":"high","techs":["php"],"cves":["CVE-2026-33944"],"tags":["GHSA-v5fq-cf5m-vwv7","dolibarr/dolibarr"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T13:29:25.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}