This script is Copyright (C) 2012-2014 Tenable Network Security, Inc.
The remote web server contains a PHP script that is vulnerable to a
reflected cross-site scripting attack.
The version of Dolibarr on the remote host fails to properly sanitize
parameters in 'admin/company.php' before using them to generate
By tricking someone into clicking on a specially crafted link, an
attacker may be able exploit this issue to inject arbitrary HTML and
script code in a user's browser to be executed within the security
context of the affected site.
Note that this install is likely affected by other XSS vulnerabilities
See also :
Upgrade to Dolibarr 3.1.1 or apply the linked patches from the vendor.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.6
Public Exploit Available : true