cve/2019/CVE-2019-1010054.md

CVE-2019-1010054

Description

Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.

POC

Reference

• https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF
• https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/chaizeg/CSRF-breach
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub