Back to directory
WRITEUP #1414

Dolibarr : unauthenticated contacts database theft

SQL InjectionSecurity code review
byVladimir
Program
Dolibarr
Published
Mar 13, 2023
Added to HackDex
Mar 15, 2023
Read Full Writeuphttps://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/
▸ RELATED WRITEUPS
Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670
SQL InjectionReverse engineering
Exploiting authorization by nonce in WordPress plugins
RCEArbitrary file upload
Directory Traversal, SQL Injection and Server-Side Request Forgery
SQL InjectionPath traversal
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload

Built with ❤️ by Shubham Rawat