CVE-2018-13448: Dolibarr ERP/CRM SQL Injection Vulnerability in product/card.php

Background

Dolibarr ERP/CRM is an open-source software package that provides enterprise resource planning (ERP) and customer relationship management (CRM) functionalities. It is widely used for managing various business processes, including sales, inventory, invoicing, and more. Dolibarr version 7.0.3 is affected by a critical SQL injection vulnerability in the product/card.php file.

Vulnerability Detail

The SQL injection vulnerability in Dolibarr ERP/CRM version 7.0.3 exists in the product/card.php file. Attackers can exploit this vulnerability by manipulating the country_id parameter to execute arbitrary SQL commands. This can lead to unauthorized access, data leakage, data manipulation, and potentially complete compromise of the affected system.

composer require dolibarr/dolibarr:7.0.4

Workaround

If upgrading immediately is not possible, users can apply a temporary workaround by modifying the affected file (product/card.php) to sanitize and validate user input before executing SQL queries. Here is an example of how to implement input validation and parameter binding using PDO in PHP:

// Retrieve the country_id parameter
$countryId = $_GET['country_id'];

// Sanitize and validate the input
$countryId = filter_var($countryId, FILTER_VALIDATE_INT);

// Prepare and execute the SQL query using parameter binding
$stmt = $pdo->prepare('SELECT * FROM products WHERE country_id = :countryId');
$stmt->bindParam(':countryId', $countryId, PDO::PARAM_INT);
$stmt->execute();

// Fetch the results
$results = $stmt->fetchAll();

// Process the results
foreach ($results as $row) {
    // Process each row
}

Note: This is a temporary workaround and should not be considered a long-term solution. Upgrading to the latest version is still strongly recommended.

Conclusion

The SQL injection vulnerability in Dolibarr ERP/CRM version 7.0.3 can have severe consequences, including unauthorized access, data leakage, and potential compromise of the affected system. It is crucial to upgrade to the latest version (7.0.4 or later) to mitigate this vulnerability. If immediate upgrade is not possible, applying the provided workaround can help temporarily protect the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for dolibarr/dolibarr →

FAQ