Junglewise Threat Intelligence

CVE-2019-25710: Dolibarr ERP-CRM SQL injection in admin dict.php

CVE-2019-25710 · Severity: high · CVSS 8.2 · Published 2026-04-12

Technologies: Dolibarr Erp\, Dolibarr Crm, dolibarr/dolibarr (Packagist). Vendors: Dolibarr, Packagist.

Executive brief

Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries.

Affected products

  • dolibarr dolibarr_erp\
  • dolibarr crm
  • Packagist dolibarr/dolibarr

References

Related threats