cve/2022/CVE-2022-4093.md

### [CVE-2022-4093](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4093)
![](https://img.shields.io/static/v1?label=Product&message=dolibarr%2Fdolibarr&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2016.0.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command&color=brighgreen)

### Description

SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected

### POC

#### Reference
- https://huntr.dev/bounties/677ca8ee-ffbc-4b39-b294-2ce81bd56788

#### Github
No PoCs found on GitHub currently.