CVE-2021-33816

PoC ×3—

CVSS 3.1

9.8 critical

EPSS

4%p90

Published

Nov 10, 2021 (Nov 10, 2021)

Modified

Jun 17, 2026

Description

The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shell_exec are blocked but backticks are not blocked.

Vendors: dolibarr
Products: dolibarr erp\/crm
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.