A vulnerability categorized as critical has been discovered in Dolibarr ERP-CRM 8.0.4. This vulnerability affects unknown code of the file dict.php of the component POST Parameter Handler. Such manipulation of the argument rowid leads to sql injection.

This vulnerability is listed as CVE-2019-25710. The attack may be performed from remote. In addition, an exploit is available.