CVE-2018-9019 Dolibarr SQL Injection vulnerability
Remote attackers can execute arbitrary SQL commands via the sortfield parameter in multiple admin pages, potentially compromising database integrity and confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-9019?
CVE-2018-9019 is a critical SQL injection vulnerability in n/a, published on 22 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php.
Weakness: CWE-89
Which versions are affected by CVE-2018-9019?
2 open source packages ship an affected version, including dolibarr/dolibarr. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
dolibarr/dolibarr Packagist | All versions | 7.0.2 |
dolibarr/dolibarr Packagist | All versions | 7.0.2 |
Products include Dolibarr Dolibarr, Oracle Data Integrator.
How do I fix CVE-2018-9019?
Upgrade dolibarr/dolibarr to 7.0.2 or later.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2018-9019 being exploited?
There is no known exploitation of CVE-2018-9019 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2019-19212 Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
- CVE-2018-16809 Dolibarr SQL injection via the integer parameters qty and value_unit
- CVE-2018-10094 Dolibarr SQL injection vulnerability
- CVE-2017-14238 Dolibarr SQL injection vulnerability in admin/menus/edit.php
- CVE-2017-14242 Dolibarr SQL injection vulnerability in don/list.php
Sources
Also known as GHSA-fff9-m6f6-q3mh, UBUNTU-CVE-2018-9019.