CVE-2018-13448 (dolibarr_erp/crm)

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.

Source: CVE-2018-13448 (dolibarr_erp/crm)