Dolibarr — PoC Archivehttps://poc.intelseclab.com/tags/dolibarr/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Dolibarr selectobject.php Authenticated Local File Inclusion (CVE-2026-34036)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34036-dolibarr-selectobject-lfi/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34036-dolibarr-selectobject-lfi/Medium severity — web · CVE-2026-34036. Status: PoC. Affects: Dolibarr ERP/CRM. Tags: dolibarr, lfi, local-file-inclusion, authenticated, crm, ajax, php.webMediumdolibarrlfilocal-file-inclusionauthenticatedcrmajaxphpDolibarr ERP/CRM OS Command Injection via MAIN_ODT_AS_PDF (CVE-2026-23500)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23500-dolibarr-command-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23500-dolibarr-command-injection/Critical severity — web · CVE-2026-23500 / GHSA-w5j3-8fcr-h87w. Status: PoC. Affects: Dolibarr ERP/CRM. Tags: dolibarr, os-command-injection, rce, authenticated, php, odt-to-pdf, reverse-shell, erp.webCriticaldolibarros-command-injectionrceauthenticatedphpodt-to-pdfreverse-shellerp