Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dolibarr ERP/CRM 安全漏洞
Vulnerability Description
Dolibarr ERP/CRM是法国Dolibarr基金会的一套基于Web的企业资源计划（ERP）和客户关系管理（CRM）系统。该系统可用来管理产品、库存、发票、订单等。 Dolibarr ERP/CRM 19.0.1及之前版本存在安全漏洞，该漏洞源于上传模板功能中存在任意文件上传漏洞，攻击者利用该漏洞可以通过上传精心设计的 .SQL 文件来执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A