VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 21, 2012· Updated Jun 16, 2026

CVE-2012-1225

CVE-2012-1225

Description

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Dolibarr/Dolibarr14 versions
    cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.5.0:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:2.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:3.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:3.1.0:rc:*:*:*:*:*:*
    • cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:alpha:*:*:*:*:*:*range: <=3.2.0
    • (no CPE)range: <=3.2.0 Alpha

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.