[Dolibarr-git] [Dolibarr/dolibarr] d410a3: WIP #6504: CVE-2017-7886

[Laurent Destailleur]

  Branch: refs/heads/3.9
  Home:   https://github.com/Dolibarr/dolibarr
  Commit: d410a320d72e569b5148b0a9a0da39831a4912e9
      
https://github.com/Dolibarr/dolibarr/commit/d410a320d72e569b5148b0a9a0da39831a4912e9
  Author: jfefe <address@hidden>
  Date:   2017-05-10 (Wed, 10 May 2017)

  Changed paths:
    M htdocs/core/class/translate.class.php

  Log Message:
  -----------
  WIP #6504: CVE-2017-7886

'defaultlang' attribute was not filtered before database request which cause an 
SQL injection.


  Commit: d7b142beb77a6b32b41a7a0c035594e414533cef
      
https://github.com/Dolibarr/dolibarr/commit/d7b142beb77a6b32b41a7a0c035594e414533cef
  Author: Laurent Destailleur <address@hidden>
  Date:   2017-05-10 (Wed, 10 May 2017)

  Changed paths:
    M htdocs/core/class/translate.class.php

  Log Message:
  -----------
  Merge pull request #6830 from jfefe/patch-12

Fix #6504: CVE-2017-7886


Compare: 
https://github.com/Dolibarr/dolibarr/compare/61a4382bd8e7...d7b142beb77a