A vulnerability classified as critical has been found in Dolibarr up to 13.0.4 (Enterprise Resource Planning Software). Affected is some unknown functionality of the file /adherents/note.php?id=1 of the component Private Note Handler. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com.
Dolibarr up to 13.0.4 Private Note /adherents/note.php access control
- Virtual Patching
- August 10, 2021
- 7:04 am
Contact us to get started
CVE-2024-8762 : CODE-PROJECTS CRUD OPERATION SYSTEM 1.0 /UPDATEDATA.PHP SID SQL INJECTION
Description A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an
CVE-2024-34334 : ORDAT FOSS-ONLINE UP TO 2.24.00 FORGOT PASSWORD SQL INJECTION
Description ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. References https://mind-bytes.de/sql-injection-in-foss-online-cve-2024-34334/
CVE-2024-45383 : MICROSOFT HIGH DEFINITION AUDIO BUS DRIVER 10.0.19041.3636 IRP HDAUDBUS_DMA RESOURCE CONTROL
Description A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636