VULNERABILITY INTELLIGENCE

CVE-2019-25710

CVSS score8.2 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-04-12
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malicious SQL code through the rowid POST parameter to extract sensitive database information using error-based SQL injection techniques.

Weakness classification

  • disclosure@vulncheck.com: CWE-89

Primary references