Vendor
Authorization Bypass in Dolibarr Document Storage
1 rule 1 TTP 1 CVEAn unauthenticated authorization bypass vulnerability in Dolibarr allows remote attackers to access arbitrary sensitive files via the document storage endpoints.
Dolibarr Members REST API Improper Authorization Vulnerability
2 rules 2 TTPs 1 CVEAn improper authorization vulnerability (CVE-2026-71504) in Dolibarr prior to version 24.0.0 allows authenticated users to overwrite the credentials of any account via the Members REST API.
Dolibarr ERP/CRM OS Command Injection (CVE-2023-30253) Exploit Publicly Available
2 rules 1 TTP 1 CVE 2 IOCsA public exploit is available for an OS Command Injection vulnerability in Dolibarr ERP/CRM versions prior to 17.0.1 (CVE-2023-30253), which allows authenticated users to inject PHP code via the Website/CMS module to obtain a reverse shell as the www-data user.
Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php
2 rules 2 TTPs 1 CVEDolibarr ERP CRM 7.0.3 is vulnerable to remote code evaluation, allowing unauthenticated attackers to execute arbitrary code by injecting PHP code through the db_name parameter, leading to arbitrary command execution.