CVE-2020-14443: Dolibarr SQL injection vulnerability in accountancy/customer/card.php
Summary
CVE-2020-14443: Dolibarr SQL injection vulnerability in accountancy/customer/card.php. Affects dolibarr/dolibarr versions < 11.0.5. Fixed in 11.0.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dolibarr is an open-source ERP and CRM system that provides various functionalities for managing accounts, customers, and more. It is widely used by businesses for its comprehensive features and ease of use. However, Dolibarr versions 11.0.4 and below are vulnerable to a SQL injection attack in the accountancy/customer/card.php file. This vulnerability can be exploited by remote authenticated users to execute arbitrary SQL commands by manipulating the 'id' parameter.
Vulnerability Detail
The SQL injection vulnerability in Dolibarr's accountancy/customer/card.php file allows remote authenticated users to execute arbitrary SQL commands. By injecting malicious SQL code through the 'id' parameter, an attacker can manipulate the database and potentially gain unauthorized access to sensitive information or modify data. This vulnerability poses a high risk to the confidentiality, integrity, and availability of the affected system.
How To Fix
Minimum fixed version
11.0.5
This is the first release that contains the fix.
composer require dolibarr/dolibarr:11.0.5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately possible, a temporary workaround can be implemented by modifying the affected file to sanitize user input and prevent SQL injection. Here is an example of a code snippet that can be added to the vulnerable file:
// Sanitize the 'id' parameter
$id = mysqli_real_escape_string($db, $_GET['id']);
// Use the sanitized 'id' parameter in the SQL query
$query = "SELECT * FROM customers WHERE id = '$id'";
Conclusion
The SQL injection vulnerability in Dolibarr's accountancy/customer/card.php file can be a serious security risk for systems running vulnerable versions. It is crucial to upgrade to the latest version (11.0.5 or above) to ensure the system is protected against this vulnerability. If immediate upgrade is not possible, implementing the provided workaround can mitigate the risk temporarily. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dolibarr/dolibarr →
FAQ
Dolibarr is an open-source ERP and CRM system that provides various functionalities for managing accounts, customers, and more. It is widely used by businesses for its comprehensive features and ease of use.
SQL injection is a type of vulnerability that allows an attacker to manipulate a database by injecting malicious SQL code. In this case, the SQL injection vulnerability in Dolibarr's accountancy/customer/card.php file allows remote authenticated users to execute arbitrary SQL commands.
This vulnerability allows remote authenticated users to execute arbitrary SQL commands, which can lead to unauthorized access to sensitive information, data modification, or even a complete compromise of the affected system. It poses a high risk to the confidentiality, integrity, and availability of the system.
To fix this vulnerability, it is recommended to upgrade Dolibarr to version 11.0.5 or above. The latest version includes a patch that addresses the SQL injection vulnerability in the accountancy/customer/card.php file.
If upgrading to the latest version is not immediately possible, a temporary workaround can be implemented by modifying the affected file to sanitize user input and prevent SQL injection. Please refer to the 'workaround' section for an example code snippet.
References
Related vulnerabilities
Recent vulnerabilities recorded for dolibarr/dolibarr.
