Approved changes feed: RSS · Atom

cpe:2.3:a:dolibarr:dolibarr:3.5.0:*:*:*:*:*:*:*

part: a version: 3.5.0 update: *

VendorDolibarr (63aa6448-b9f1-5072-badf-d5da7e178b3f)
ProductDolibarr (e1a4d2d9-2452-53d5-8282-d972bebb0801)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/dolibarr/dolibarr purl2cpe 2026-06-01 10:11:16.218735
pkg:github/dolibarr/dolibarr purl2cpe 2026-06-01 10:11:16.218736
pkg:sourceforge/dolibarr purl2cpe 2026-06-01 10:11:16.218737

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-3935 vulnerable 2026-06-08 05:06:38.859956 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.php.
Published: 2015-06-10T14:00:00.000Z
Updated: 2024-08-06T05:56:16.184Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.