← All advisories

Critical severity9.8NVD Advisory· Published Jan 26, 2020· Updated Jun 17, 2026

CVE-2020-7995

CVE-2020-7995

Description

The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:10.0.6:*:*:*:*:*:*:*
Dolibarr/Dolibarrdescription
osv-coords2 versions
pkg:bitnami/dolibarr pkg:composer/dolibarr/dolibarr
>= 10.0.6, <= 10.0.6+ 1 more
- (no CPE)range: >= 10.0.6, <= 10.0.6
- (no CPE)

Patches

Vulnerability mechanics

References

5

packetstormsecurity.com/files/163541/Dolibarr-ERP-CRM-10.0.6-Login-Brute-Forcer.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-m5c3-3gvf-q8j5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7995ghsaADVISORY
github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-brute-force.mdnvdBroken LinkWEB
tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-brute-force.htmlnvdBroken LinkWEB

News mentions

0

No linked articles in our index yet.