writeups.xyz / Dolibarr : unauthenticated contacts database theft

Submitter : c2a

Date: 13 March 2023

Bounty : undisclosed

Vulnerabilities :

• SQL Injection
• Security Code Review

Programs :

• Dolibarr

Authors :

• Vladimir

Link :
https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/