# Dolibarr Dolibarr Erp\/Crm


- [CVE-2022-43138](https://insights.sbomify.com/CVE-2022-43138/): Dolibarr vulnerable to privilege escalation (critical 9.8)
- [CVE-2022-40871](https://insights.sbomify.com/CVE-2022-40871/): Dolibarr vulnerable to Eval Injection (critical 9.8)
- [CVE-2021-33816](https://insights.sbomify.com/CVE-2021-33816/): Dolibarr remote PHP code execution (critical 9.8)
- [CVE-2020-7995](https://insights.sbomify.com/CVE-2020-7995/): Dolibarr Improper Restriction of Excessive Authentication Attempts (critical 9.8)
- [CVE-2013-2091](https://insights.sbomify.com/CVE-2013-2091/): SQL injection in dolibarr (critical 9.8)
- [CVE-2013-2093](https://insights.sbomify.com/CVE-2013-2093/): Command injection in dolibarr (critical 9.8)
- [CVE-2018-13447](https://insights.sbomify.com/CVE-2018-13447/): Dolibarr SQL injection vulnerability in product/card.php (critical 9.8)
- [CVE-2018-13448](https://insights.sbomify.com/CVE-2018-13448/): Dolibarr SQL injection vulnerability in product/card.php (critical 9.8)
- [CVE-2018-13449](https://insights.sbomify.com/CVE-2018-13449/): Dolibarr SQL injection vulnerability in product/card.php (critical 9.8)
- [CVE-2018-13450](https://insights.sbomify.com/CVE-2018-13450/): Dolibarr SQL injection vulnerability in product/card.php (critical 9.8)
- [CVE-2017-17897](https://insights.sbomify.com/CVE-2017-17897/): Dolibarr SQL injection vulnerability in comm/multiprix.php (critical 9.8)
- [CVE-2017-17899](https://insights.sbomify.com/CVE-2017-17899/): Dolibarr SQL injection vulnerability in adherents/subscription/info.php (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/dolibarr/dolibarr-erp%5C/crm/