SQL injection in dolibarr - CVE-2018-9019

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data passed via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php. A remote attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Affected software

How to mitigate CVE-2018-9019

External References

• https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog
• https://github.com/Dolibarr/dolibarr/commit/83b762b681c6dfdceb809d26ce95f3667b614739

Related Security Bulletins

• Multiple vulnerabilities in dolibarr
• Multiple vulnerabilities in Oracle Data Integrator