VULNERABILITY INTELLIGENCE

CVE-2018-10092

CVSS score8 HIGH

EPSS probability2.01%

CISA KEVNot currently listed

Published2018-05-22

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads.

Weakness classification

CWE-862: Missing Authorization

Primary references

cve@mitre.org — Exploit, Mailing List, Technical Description, Third Party Advisory
cve@mitre.org — Release Notes
cve@mitre.org — Patch
cve@mitre.org — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory