CVE-2012-1225 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 2.4% (pctl 84)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 2.41% — more likely to be exploited than 84% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2012-02-21 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| dolibarr | dolibarr erp\/crm |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Dolibarr ERP/CRM 3.x - '/adherents/fiche.php' SQL Injection | 2012-02-10 |
References
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html
- http://osvdb.org/79011
- http://secunia.com/advisories/47969
- http://www.securityfocus.com/bid/51956
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html
- http://osvdb.org/79011
- http://secunia.com/advisories/47969
- http://www.securityfocus.com/bid/51956
→ the Explorer · watch your stack · NVD