## Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

- 種別: advisory
- 重大度: high
- 関連技術: php
- CVE: CVE-2026-33944
- 公開日時: 2026-10-27T13:29:25.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-v5fq-cf5m-vwv7)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-v5fq-cf5m-vwv7

影響: composer:dolibarr/dolibarr <= 23.0.0
A SQL Injection vulnerability exists in the Third Party (Company) update functionality of Dolibarr ERP/CRM. The localtax1_value parameter (lt1) is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or parameterized query binding. An authenticated user with standard "Third Party: Create/Edit" permission can extract any data from the database, including password hashes, API keys, and all business data. Tested on D…