漏洞描述
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
sysdream.comhttps://sysdream.com/news/lab/2018-05-21-cve-2018-10094-dolibarr-sql-injection-vulnerability/↗www.openwall.comhttp://www.openwall.com/lists/oss-security/2018/05/21/1↗github.comhttps://github.com/Dolibarr/dolibarr/commit/7ade4e37f24d6859987bb9f6232f604325633fdd↗github.comhttps://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog↗