Critical severity9.8NVD Advisory· Published Dec 27, 2017· Updated May 13, 2026
CVE-2017-17897
CVE-2017-17897
Description
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
dolibarr/dolibarrPackagist | < 6.0.5 | 6.0.5 |
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a034689272128cnvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-9v7m-f3cv-68rwghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-17897ghsaADVISORY
News mentions
0No linked articles in our index yet.