CVE-2020-35136: 
PHP vulnerability analysis and mitigation

Dolibarr 12.0.3 was discovered to contain an authenticated Remote Code Execution vulnerability. An attacker with access to the admin dashboard can exploit the backup function by inserting a malicious payload into the filename parameter 'zipfilename_template' in admin/tools/dolibarr_export.php (NVD, GitHub Patch).

The vulnerability has a CVSS v3.1 base score of 7.2 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The issue stems from improper sanitization of the zipfilename_template parameter in the backup functionality, which allows injection of malicious commands through specially crafted filenames (NVD).

A successful exploitation of this vulnerability could allow an authenticated attacker with admin privileges to execute arbitrary code on the underlying system, potentially leading to complete system compromise with the privileges of the web server (NVD).

The vulnerability requires authentication and admin dashboard access to exploit. Proof-of-concept exploit code has been publicly disclosed, making it easier for attackers to exploit vulnerable systems (NVD).

The vulnerability was fixed in a patch that disallows the '--' string in filenames for security purposes. Organizations running affected versions should upgrade to a patched version. The fix was implemented through commit 4fcd3fe49332baab0e424225ad10b76b47ebcbac (GitHub Patch).