[Bug 933195] CVE-2015-3935: dolibarr HTML injection