UBUNTU-CVE-2012-1225

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2012-1225

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2012/UBUNTU-CVE-2012-1225.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2012-1225

Upstream

CVE-2012-1225

Withdrawn

2025-07-18T16:42:45Z

Published

2012-02-21T13:31:00Z

Modified

2025-07-17T16:51:46Z

Severity

Ubuntu - medium

Summary

[none]

Details

Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.

References

Affected packages

Ubuntu:16.04:LTS / dolibarr

Package

Name: dolibarr
Purl: pkg:deb/ubuntu/dolibarr@3.5.8+dfsg1-1ubuntu1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.5.8+dfsg1-1ubuntu1

Affected versions

3.*

3.5.5+dfsg1-2

3.5.7+dfsg1-1

3.5.8+dfsg1-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "3.5.8+dfsg1-1ubuntu1",
            "binary_name": "dolibarr"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2012/UBUNTU-CVE-2012-1225.json"