← Back to CVE List

CVE-2023-4197

Published: 2023-11-01T08:15Z
Last Modified: 2024-11-21T08:34Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt