description: SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php.
problem types: SQL Injection
affected:
{
product: dolibarr
vendor: dolibarr
versions:
status: affected, version: 3.3.1
}