CVE-2011-4814

Name: CVE-2011-4814
Creator: NVD / NIST
Published: 2011-12-14T00:55:19.433+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 5.73%

Last modified Jun 16, 2026

CVE-2011-4814 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) admin/boxes.php, (3) comm/clients.php, (4) commande/index.php; and the optioncss parameter to (5) admin/ihm.php and (6) user/home.php.. EPSS estimates a 5.73% chance of exploitation in the next 30 days.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) admin/boxes.php, (3) comm/clients.php, (4) commande/index.php; and the optioncss parameter to (5) admin/ihm.php and (6) user/home.php.

Metrics

EPSS Probability

5.73%

92.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions	Update
Dolibarr	Dolibarr Erp\/Crm	<= 3.1.0	Rc
Dolibarr	Dolibarr Erp\/Crm	2.5.0	—
Dolibarr	Dolibarr Erp\/Crm	2.6.0	—
Dolibarr	Dolibarr Erp\/Crm	2.6.1	—
Dolibarr	Dolibarr Erp\/Crm	2.7.0	—
Dolibarr	Dolibarr Erp\/Crm	2.7.1	—
Dolibarr	Dolibarr Erp\/Crm	2.8.0	—
Dolibarr	Dolibarr Erp\/Crm	2.8.1	—
Dolibarr	Dolibarr Erp\/Crm	2.9.0	—
Dolibarr	Dolibarr Erp\/Crm	3.0.0	—
Dolibarr	Dolibarr Erp\/Crm	3.0.1	—

References

http://www.osvdb.org/77339Broken Link
http://www.securityfocus.com/archive/1/520619/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/50777Broken Link, Exploit, Third Party Advisory, VDB Entry
https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91Exploit, Patch
https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1Exploit, Patch
https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535aExploit, Patch
https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675Exploit, Patch
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.htmlExploit
http://www.osvdb.org/77339Broken Link
http://www.securityfocus.com/archive/1/520619/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/50777Broken Link, Exploit, Third Party Advisory, VDB Entry
https://github.com/Dolibarr/dolibarr/commit/63820ab37537fdff842539425b2bf2881f0d8e91Exploit, Patch
https://github.com/Dolibarr/dolibarr/commit/762f98ab4137749d0993612b4e3544a4207e78a1Exploit, Patch
https://github.com/Dolibarr/dolibarr/commit/c539155d6ac2f5b6ea75b87a16f298c0090e535aExploit, Patch
https://github.com/Dolibarr/dolibarr/commit/d08d28c0cda1f762a47cc205d4363de03df16675Exploit, Patch
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_dolibarr.htmlExploit

Timeline

Published: Dec 14, 2011
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-4814?

How severe is CVE-2011-4814?

Severity scoring for CVE-2011-4814 is pending analysis. The EPSS model estimates a 5.73% probability of exploitation in the next 30 days.

How do I fix CVE-2011-4814?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-4814?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST