A critical SQL injection vulnerability in Dolibarr ERP/CRM 10.0.1 allows unauthenticated attackers to extract sensitive database information through malicious POST requests.

This is an SQL injection flaw (CWE-89) located in the viewcat.php file. An unauthenticated attacker can inject malicious SQL commands into the elemid POST parameter to perform error-based or time-based blind data extraction.

The ability for an unauthenticated attacker to manipulate database queries poses a severe risk to data confidentiality and integrity. Successful exploitation could lead to the unauthorized disclosure of sensitive business information, such as customer records, credentials, or proprietary financial data. With a CVSS score of 8.2, this vulnerability is classified as High severity and requires immediate attention to prevent potential data breaches.

Immediate Action: Since no specific patch version is documented in the provided data, users are advised to upgrade to the latest stable release of Dolibarr ERP/CRM to ensure all known vulnerabilities are addressed. If upgrading is not immediately possible, restrict access to the viewcat.php endpoint via network controls.

Proactive Monitoring: Review web server and application logs for suspicious POST requests directed at viewcat.php, specifically monitoring for unusual characters or SQL syntax in the elemid parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block common SQL injection patterns targeting the application.

Public Exploit Available: Yes, a functional exploit is available via Exploit-DB (EDB-ID: 47362).

Given the availability of a public exploit and the unauthenticated nature of the attack vector, this vulnerability presents a significant risk to the organization. Administrators should prioritize upgrading the software to a newer version immediately. If an upgrade path is unavailable, implement strict access controls and WAF filtering to mitigate the risk of unauthorized database access.