Critical severity9.8NVD Advisory· Published Sep 11, 2017· Updated May 13, 2026

CVE-2017-14242

Description

SQL injection vulnerability in don/list.php in Dolibarr version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the statut parameter.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
dolibarr/dolibarrPackagist	< 6.0.1	6.0.1

Affected products

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr:6.0.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/Dolibarr/dolibarr/commit/33e2179b65331d9d9179b59d746817c5be1fecdbnvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-jjgq-jq8g-24w4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-14242ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000