---
id: 4196
title: "[CVE-2019-11200] Dolibarr Version 9.0.1 — Multiple Vulnerabilities"
cve: CVE-2019-11200
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/dolibarr-version-9-0-1-advisory"
published_at: "2019-07-25T00:00:00Z"
tags: ["rce", "stored-xss", "vulnerability-advisory", "dolibarr", "cve-2019-11200", "erp"]
phying_url: "https://phying.com/item/4196"
lang: en
---

# [CVE-2019-11200] Dolibarr Version 9.0.1 — Multiple Vulnerabilities

## Summary

Bishop Fox advisory on three Dolibarr 9.0.1 flaws: RCE via the backup mysqldump parameter (CVE-2019-11200), RCE in the website module, and stored XSS; fixed in 9.0.3.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2019-11200
- **Published:** 2019-07-25T00:00:00Z
- **Original:** https://bishopfox.com/blog/dolibarr-version-9-0-1-advisory
- **Phying News:** https://phying.com/item/4196