Multiple Cross-Site Scripting (XSS) Vulnerabilities in Dolibarr ERP/CRM 6.0.0

Multiple Cross-Site Scripting (XSS) Vulnerabilities in Dolibarr ERP/CRM 6.0.0

CVE-2017-14239 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php.

Learn more about our Web App Pen Testing.