CVEs-PoC/2020/CVE-2020-9016.md

### [CVE-2020-9016](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9016)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.

### POC

#### Reference
- https://code610.blogspot.com/2020/02/this-time-i-tried-to-check-one-of.html

#### Github
- https://github.com/Live-Hack-CVE/CVE-2020-9016