CVE-2012-1225

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-02-21 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

Affected products

dolibarr: through 3.2.0; 2.5.0, 2.6.0, 2.6.1, 2.7.0, 2.7.1, 2.8.0 (+6)

References

http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html
http://osvdb.org/79011
http://secunia.com/advisories/47969
http://www.securityfocus.com/bid/51956
http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html
http://osvdb.org/79011
http://secunia.com/advisories/47969
http://www.securityfocus.com/bid/51956

Get alerted when CVE-2012-1225 or the next vulnerability affects your stack