Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
影響: composer:dolibarr/dolibarr <= 23.0.0
A SQL Injection vulnerability exists in the Third Party (Company) update functionality of Dolibarr ERP/CRM. The localtax1_value parameter (lt1) is concatenated directly into an SQL UPDATE statement in societe/class/societe.class.php at line 1672 without any escaping, type casting, or parameterized query binding. An authenticated user with standard "Third Party: Create/Edit" permission can extract any data from the database, including password hashes, API keys, and all business data. Tested on D…
| CVE | CVE-2026-33944 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 28. 오전 06:03 |
| 데이터 | Markdown JSON |
2026. 10. 27. 오후 10:29, GitHub Advisory Database에서 "Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: PHP. CVE: CVE-2026-33944.