Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Dolibarr File Manager Broken Access Control (inverted permission logic in config.inc.php)

vuldb.com 2026-09-04 查看中文 →

Referenced CVEs: CVE-2026-85401 · 6.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from vuldb.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Eleveo Quality Management 9.7.0 Cross-Site Scripting (XSS) vulnerability: CVE-2026-85406 2026-09-04 Eleveo QMS 9.7.0 Authenticated Stored XSS in multiple fields 2026-09-04 CVE-2026-85405: Eleveo Call Recording 9.7.0 Stored XSS in /caller/roleAddAction.do 2026-09-04 Eleveo Call Recording 9.7.0 Authenticated Stored XSS (CWE-79) 2026-09-04 SQL Injection in code-projects HIS: PrespController.php getSinglePresp (CVE-2026-85399) 2026-09-04

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro