CVE-2018-10094: SQL Injection

May 22, 2018 (updated July 2, 2018)

An SQL injection vulnerability in Dolibarr allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

References

nvd.nist.gov/vuln/detail/CVE-2018-10094
www.exploit-db.com/exploits/44805/

Detect and mitigate CVE-2018-10094 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →