https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T23:27:33.694966+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-321338 EUVD-2026-321338 2026-10-20T23:27:33.697437+00:00 EUVD-2026-321338 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25357 fkie_cve-2018-25357 2026-10-20T23:27:33.697469+00:00

Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the db_name parameter. Attackers can send a POST request to install/step1.php with malicious PHP code in the db_name parameter, then execute commands via the check.php endpoint using the cmd GET parameter.

 https://cve.radiocsirt.org/vuln/ghsa-hxmh-2xc4-c894 GHSA-hxmh-2xc4-c894 — Dolibarr ERP CRM contains a remote code evaluation vulnerability 2026-10-20T23:27:33.697500+00:00

Affected: Packagist: dolibarr/dolibarr

Dolibarr ERP CRM 7.0.3 contains a remote code evaluation vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the db_name parameter. Attackers can send a POST request to install/step1.php with malicious PHP code in the db_name parameter, then execute commands via the check.php endpoint using the cmd GET parameter.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-25357 UBUNTU-CVE-2018-25357 2026-10-20T23:27:33.697526+00:00

Affected: Ubuntu:Pro:16.04:LTS: dolibarr

Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the db_name parameter. Attackers can send a POST request to install/step1.php with malicious PHP code in the db_name parameter, then execute commands via the check.php endpoint using the cmd GET parameter.