CVE-2020-35136

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bilishim.com/2020/12/18/zero-hunting-2.htmlExploit, Third Party Advisory
https://github.com/Dolibarr/dolibarr/commit/4fcd3fe49332baab0e424225ad10b76b47ebcbacPatch, Third Party Advisory
https://github.com/Dolibarr/dolibarr/releasesThird Party Advisory
https://sourceforge.net/projects/dolibarr/Product, Third Party Advisory
http://bilishim.com/2020/12/18/zero-hunting-2.htmlExploit, Third Party Advisory
https://github.com/Dolibarr/dolibarr/commit/4fcd3fe49332baab0e424225ad10b76b47ebcbacPatch, Third Party Advisory
https://github.com/Dolibarr/dolibarr/releasesThird Party Advisory
https://sourceforge.net/projects/dolibarr/Product, Third Party Advisory

Timeline

Published: Dec 23, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-351377.5The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS disco CVE-2020-351389.8The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/CVE-2020-351397.5An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of servic CVE-2020-35146.7A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker CVE-2020-351417.5An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of CVE-2020-351457.8Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple co CVE-2020-351495.3lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or c CVE-2020-35156.1Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenti CVE-2020-351518.8The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injec CVE-2020-351527.8Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-admini CVE-2020-35164.3A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web ser CVE-2020-351639.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insuffic