CVE-2012-10059

Dolibarr ERP/CRM Post-Auth OS Command Injection

CVSS 9.4 CRITICALEPSS 3.2%CWE-78

Vexday Risk Score

63High priority

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.4EPSS 3.2%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

06 Apr 2012Metasploit module available

13 Aug 2025Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Dolibarr ERP/CRM versions <= 3.1.1 and <= 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sql_compat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code execution on the server.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected products

Dolibarr Project · ERP/CRM

public PoCs found — 4

cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dolibarr_cmd_exec.rbunverified cve_referenceseclists.org/fulldisclosure/2012/Apr/78unverified cve_referencewww.exploit-db.com/exploits/18724unverified cve_referencewww.exploit-db.com/exploits/18725unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dolibarr_cmd_exec.rb https://seclists.org/fulldisclosure/2012/Apr/78 https://www.dolibarr.org/https://www.exploit-db.com/exploits/18724 https://www.exploit-db.com/exploits/18725 https://www.vulncheck.com/advisories/dolibarr-erp-crm-post-auth-os-command-injection