CVE-2017-18260

Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal/list.php (propal_statut parameter, aka search_statut parameter).

Date published : 2018-04-10

https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-010