CVE-2019-25452
Received Received - Intake
SQL Injection in Dolibarr 10.0.1 viewcat.php Allows Data Extraction

Publication date: 2026-02-22

Last updated on: 2026-03-02

Assigner: VulnCheck

Description
Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted POST requests with malicious SQL payloads in the elemid parameter to extract sensitive database information using error-based or time-based blind SQL injection techniques.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-22
Last Modified
2026-03-02
Generated
2026-06-19
AI Q&A
2026-02-22
EPSS Evaluated
2026-06-18
NVD
CVE-2019-25452
EUVD
EUVD-2019-19601
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
dolibarr dolibarr_erp/crm 10.0.1
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

[{'type': 'paragraph', 'content': "This vulnerability is an SQL injection in Dolibarr ERP/CRM version 10.0.1, specifically in the 'elemid' POST parameter of the viewcat.php endpoint."}, {'type': 'paragraph', 'content': "Unauthenticated attackers can send specially crafted POST requests with malicious SQL code in the 'elemid' parameter to execute arbitrary SQL queries on the database."}, {'type': 'paragraph', 'content': 'The attack techniques include error-based and time-based blind SQL injection, which allow attackers to extract sensitive database information or confirm injection points by causing delays.'}] [1]

Impact Analysis

This vulnerability can allow attackers to access sensitive information stored in the database without authentication.

Attackers may extract confidential data or manipulate database contents, potentially leading to data breaches or unauthorized data modification.

The exploitation can also cause delays in the system response, which might affect the availability or performance of the application.

Compliance Impact

I don't know

Detection Guidance

[{'type': 'paragraph', 'content': "This SQL injection vulnerability can be detected by sending crafted POST requests to the /dolibarr-10.0.1/htdocs/categories/viewcat.php endpoint targeting the 'elemid' parameter with malicious SQL payloads."}, {'type': 'paragraph', 'content': 'Detection techniques include using error-based or time-based blind SQL injection payloads to confirm the vulnerability.'}, {'type': 'list_item', 'content': 'Example error-based payload to test injection: elemid=0 AND EXTRACTVALUE(7549,CONCAT(0x5c,0x71706a7171,(SELECT (ELT(7549=7549,1))),0x7176787a71))'}, {'type': 'list_item', 'content': 'Example time-based blind payload to test injection: elemid=0 AND (SELECT 6353 FROM (SELECT(SLEEP(5)))aOzn)'}, {'type': 'paragraph', 'content': 'These payloads should be sent as POST parameters with a valid session token to the vulnerable script to observe error messages or response delays indicating SQL injection.'}] [1]

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25452. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart