https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 03:48:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-26397 cnvd-2019-26397 https://cve.radiocsirt.org/vuln/cnvd-2019-26397 https://cve.radiocsirt.org/vuln/euvd-2026-54224 EUVD-2026-54224 https://cve.radiocsirt.org/vuln/euvd-2026-54224 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11201 <p>Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server.</p> <p>Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11201 https://cve.radiocsirt.org/vuln/ghsa-jwg3-v9xm-v6q9 <p><strong>Affected:</strong> Packagist: dolibarr/dolibarr</p> <p>Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server.</p> <p><strong>Affected:</strong> Packagist: dolibarr/dolibarr</p> <p>Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server.</p> https://cve.radiocsirt.org/vuln/ghsa-jwg3-v9xm-v6q9 https://cve.radiocsirt.org/vuln/gsd-2019-11201 gsd-2019-11201 https://cve.radiocsirt.org/vuln/gsd-2019-11201 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11201 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dolibarr</p> <p>Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dolibarr</p> <p>Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11201