dolibarr security advisories
9 threat alerts tracking vulnerabilities and security advisories that affect dolibarr products.
Vulnios monitors dolibarr CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent dolibarr security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-23500 — dolibarr — dolibarr_erp\/crm
Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in odf.php concatenates t
criticalCVE-2026-23500Critical Vulnerability: CVE-2017-17899 — dolibarr — dolibarr_erp\/crm
SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.
criticalCVE-2017-17899Critical Vulnerability: CVE-2017-17900 — dolibarr — dolibarr_erp\/crm
SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.
criticalCVE-2017-17900Critical Vulnerability: CVE-2017-17897 — dolibarr — dolibarr_erp\/crm
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
criticalCVE-2017-17897Critical Vulnerability: CVE-2017-14242 — dolibarr — dolibarr
SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter.
criticalCVE-2017-14242Critical Vulnerability: CVE-2017-14238 — dolibarr — dolibarr
SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter.
criticalCVE-2017-14238Critical Vulnerability: CVE-2017-9435 — dolibarr — dolibarr
Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).
criticalCVE-2017-9435Critical Vulnerability: CVE-2017-7886 — dolibarr — dolibarr_erp\/crm
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.
criticalCVE-2017-7886Critical Vulnerability: CVE-2017-7888 — dolibarr — dolibarr_erp\/crm
Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.
criticalCVE-2017-7888
Track dolibarr exposure across your environment
Vulnios automatically cross-references your asset inventory against new dolibarr CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan