CVE-2018-19998: Dolibarr SQL Injection Vulnerability in user/card.php

Background

Dolibarr is an open-source ERP and CRM software designed for small and medium-sized businesses. It provides a range of features including accounting, inventory management, project management, and customer relationship management. Dolibarr is widely used for its user-friendly interface and extensive customization options. However, a SQL injection vulnerability has been discovered in the user/card.php file of Dolibarr version 8.0.2.

Vulnerability Detail

The SQL injection vulnerability in user/card.php allows remote authenticated users to execute arbitrary SQL commands by exploiting the 'employee' parameter. This can lead to unauthorized access, data manipulation, or even complete compromise of the affected system. The vulnerability has a CVSS score of 8.8, indicating a high severity level. It is crucial to address this vulnerability promptly to prevent potential exploitation and protect sensitive data.

composer require dolibarr/dolibarr:8.0.4

Workaround

If upgrading to the latest version is not immediately feasible, a temporary workaround can be implemented by modifying the affected file (user/card.php) to include input validation and sanitization for the 'employee' parameter. Here is an example of how the code can be modified:

// Add input validation and sanitization
$employee = $_GET['employee'];
$employee = filter_var($employee, FILTER_SANITIZE_STRING);

// Use prepared statements to prevent SQL injection
$stmt = $pdo->prepare('SELECT * FROM employees WHERE id = :id');
$stmt->bindParam(':id', $employee);
$stmt->execute();

// Continue with the rest of the code

Conclusion

The SQL injection vulnerability in Dolibarr version 8.0.2 poses a significant risk to the security and integrity of the affected system. It is crucial to promptly upgrade to version 8.0.4 or later to mitigate this vulnerability. Failure to address this issue may result in unauthorized access, data manipulation, or even complete compromise of the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for dolibarr/dolibarr →

FAQ