https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 13:30:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-321123 EUVD-2026-321123 https://cve.radiocsirt.org/vuln/euvd-2026-321123 https://cve.radiocsirt.org/vuln/fkie_cve-2012-10059 <p>Dolibarr ERP/CRM versions &lt;= 3.1.1 and &lt;= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.</p> <p>Dolibarr ERP/CRM versions &lt;= 3.1.1 and &lt;= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-10059 https://cve.radiocsirt.org/vuln/ghsa-p23h-626c-6g34 <p>Dolibarr ERP/CRM versions &lt;= 3.1.1 and &lt;= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.</p> <p>Dolibarr ERP/CRM versions &lt;= 3.1.1 and &lt;= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-p23h-626c-6g34 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-10059 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dolibarr</p> <p>Dolibarr ERP/CRM versions &lt;= 3.1.1 and &lt;= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dolibarr</p> <p>Dolibarr ERP/CRM versions &lt;= 3.1.1 and &lt;= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-10059