Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
影響: composer:dolibarr/dolibarr <= 23.0.0
A SQL Injection vulnerability exists in the Third Party (Company) update functionality of Dolibarr ERP/CRM. The localtax1_value parameter (lt1) is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or parameterized query binding. An authenticated user with standard "Third Party: Create/Edit" permission can extract any data from the database, including password hashes, API keys, and all business data. Tested on D…
| CVE | CVE-2026-33944 |
|---|---|
| 情報源 | GitHub Advisory Database |
| 取得日時 | 2026/10/28 06:03 |
| データ | Markdown JSON |
2026/10/27 22:29、GitHub Advisory Databaseが「Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: PHP。CVE: CVE-2026-33944。