Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
255 results · page 5 of 6
Mar 2, 2021GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.CVE-2021-21255 · Other software · glpi-project · reported by GitHubMedium 5.8
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch entities with IDOR from a logged in user. This is fixed in version 9.5.4.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 26, 2020In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemTCVE-2020-27663 · Other software · Glpi-project · reported by MITREMedium 4.3
In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 26, 2020In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database tablCVE-2020-27662 · Other software · Glpi-project · reported by MITREMedium 4.3
In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database table (e.g., glpi_tickets, glpi_users, etc.).
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 25, 2020GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licCVE-2020-26212 · Other software · glpi-project · reported by GitHubHigh 7.7
GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.3, any authenticated user has read-only permissions to the planning of every other user, even admin ones. Steps to reproduce the behavior: 1. Create a new planning with 'eduardo.mozart' user (from 'IT' group that belongs to 'Super-admin') into it's personal planning at 'Assistance' > 'Planning'. 2. Copy the CalDAV url and use a CalDAV client (e.g. Thunderbird) to sync the planning with the provided URL. 3. Inform the username and password from any valid user (e.g. 'camila' from 'Proativa' group). 4. 'Camila' has read-only access to 'eduardo.mozart' personal planning. The same behavior happens to any group. E.g. 'Camila' has access to 'IT' group planning, even if she doesn't belong to this group and has a 'Self-service' profile permission). This issue is fixed in version 9.5.3. As a workaround, one can remove the `caldav.php` file to block access to CalDAV server.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2020In GLPI before version 9.5.2, there is a SQL Injection in the API's search function.CVE-2020-15226 · Other software · glpi-project · reported by GitHubMedium 5
In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break the SQL syntax, but it is also possible to utilise a UNION SELECT query to reflect sensitive information such as the current database version, or database user. The most likely scenario for this vulnerability is with someone who has an API account to the system. The issue is patched in version 9.5.2. A proof-of-concept with technical details is available in the linked advisory.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2020In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ.CVE-2020-15217 · Other software · glpi-project · reported by GitHubMedium 5.3
In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to the FAQ.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2020In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_base` and `url_base_api`.CVE-2020-15177 · Other software · glpi-project · reported by GitHubHigh 8
In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_base` and `url_base_api`. These settings are referenced throughout the application and allow for vulnerabilities like Cross-Site Scripting and Insecure Redirection Since authentication is not required to perform these changes,anyone could point these fields at malicious websites or form input in a way to trigger XSS. Leveraging JavaScript it's possible to steal cookies, perform actions as the user, etc. The issue is patched in version 9.5.2.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2020In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL InCVE-2020-15176 · Other software · glpi-project · reported by GitHubHigh 8.7
In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulnerability an attacker is able to exfiltrate sensitive information like passwords, reset tokens, personal details, and more. The issue is patched in version 9.5.2
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2020In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin.CVE-2020-15175 · Other software · glpi-project · reported by GitHubHigh 7.4
In GLPI before version 9.5.2, the `pluginimage.send.php` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the files and folders contained in “/files/”. Some of the sensitive information that is compromised are the user sessions, logs, and more. An attacker would be able to get the Administrators session token and use that to authenticate. The issue is patched in version 9.5.2.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2020In GLPI before version 9.5.0, the encryption algorithm used is insecure.CVE-2020-11031 · Other software · glpi-project · reported by GitHubHigh 7.8
In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The library chosen is sodium.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2020In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature.CVE-2020-15108 · Other software · glpi-project · reported by GitHubHigh 7.1
In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2020In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type.CVE-2020-11062 · Other software · GLPI · reported by GitHubMedium 6
In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type. This has been fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2020In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality.CVE-2020-11060 · Other software · glpi-project · reported by GitHubHigh 7.4
In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the difficulty of the exploitation, the attack is only conceivable by an account having Maintenance privileges and the right to add WIFI networks. This is fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
May 12, 2020GLPI before before version 9.4.6 has a vulnerability involving a default encryption key.CVE-2020-5248 · Other software · glpi-project · reported by GitHubHigh 7.2
GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key before installing GLPI. But on existing instances, data must be reencrypted with the new key. Problem is we can not know which columns or rows in the database are using that; espcially from plugins. Changing the key without updating data would lend in bad password sent from glpi; but storing them again from the UI will work.
- Product
- glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 5, 2020In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities.CVE-2020-11036 · Other software · glpi-project · reported by GitHubHigh 7.6
In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with content "<script>alert(1)</script>" reproduces the attack. This can be exploited by a user with administrator privileges in the User-Agent field. It can also be exploited by an outside party through the following steps: 1. Create a user with the surname `" onmouseover="alert(document.cookie)` and an empty first name. 2. With this user, create a ticket 3. As an administrator (or other privileged user) open the created ticket 4. On the "last update" field, put your mouse on the name of the user 5. The XSS fires This is fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
May 5, 2020In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm.CVE-2020-11035 · Other software · glpi-project · reported by GitHubHigh 7.5
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
May 5, 2020In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp.CVE-2020-11034 · Other software · glpi-project · reported by GitHubMedium 6.1
In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
May 5, 2020In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.phCVE-2020-11033 · Other software · glpi-project · reported by GitHubMedium 6.6
In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All api_tokens which can be used to do privileges escalations or read/update/delete data normally non accessible to the current user. - All personal_tokens can display another users planning. Exploiting this vulnerability requires the api to be enabled, a technician account. It can be mitigated by adding an application token. This is fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
May 5, 2020In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances.CVE-2020-11032 · Other software · glpi-project · reported by GitHubHigh 7.6
In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 1, 2019GLPI 0.83.7 has Local File Inclusion in common.tabs.php.CVE-2013-2227 · Other software · INDEPNET Development Team · reported by Red HatHigh 7.5
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
- Product
- GLPI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comsecurityfocus.com
Sep 25, 2019GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature.CVE-2019-14666 · Other software · Glpi-project · reported by MITREHigh 8.8
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comtarlogic.com
Jul 15, 2019GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS).CVE-2019-1010307 · Other software · GLPI · reported by josh@bress.netMedium 5.4
GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The attack vector is: 1- User Create a ticket , 2- Admin opens another ticket and click on the "Link Tickets" feature, 3- a request to the endpoint fetches js and executes it.
- Product
- GLPI Product
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2019GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description.CVE-2019-1010310 · Other software · GLPI · reported by josh@bress.netLow 3.5
GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools > Reminder > Description .. Set the description to any iframe/form tags and apply. The attack vector is: The attacker puts a login form, the user fills it and clicks on submit .. the request is sent to the attacker domain saving the data. The fixed version is: 9.4.1.
- Product
- GLPI Product
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2019An issue was discovered in GLPI before 9.4.1.CVE-2019-13240 · Other software · Glpi-project · reported by MITREMedium 5.9
An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2019An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.CVE-2019-12724 · Other software · Teclib-edition · reported by MITREMedium 6.1
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $_POST['name'] parameter.
- Product
- News
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2019An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.CVE-2019-12723 · Other software · Teclib-edition · reported by MITRECritical 9.8
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via container_id and old_order parameters to ajax/reorder.php by an unauthenticated user.
- Product
- Fields
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2019inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.CVE-2019-13239 · Other software · Glpi-project · reported by MITREMedium 6.1
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2019Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uCVE-2019-12530 · Other software · Glpi Dashboard Project · reported by MITRECritical 9.8
Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh.
- Product
- Glpi Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 29, 2019The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.CVE-2019-10477 · Other software · Fusioninventory · reported by MITREHigh 7.5
The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
- Product
- Fusioninventory
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2019Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.CVE-2019-10233 · Other software · Glpi-project · reported by MITREHigh 8.1
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2019Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.CVE-2019-10232 · Other software · Teclib-edition · reported by MITRECritical 9.8
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
- Product
- Gestionnaire Libre DE Parc Informatique
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 27, 2019Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.CVE-2019-10231 · Other software · Teclib-edition · reported by MITRECritical 9.8
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).
- Product
- Gestionnaire Libre DE Parc Informatique
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2018The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to fronCVE-2018-13049 · Other software · Glpi-project · reported by MITREHigh 8.8
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2018An issue was discovered in GLPI through 9.2.1.CVE-2018-7563 · Other software · Glpi-project · reported by MITREMedium 6.1
An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.commembership.backbox.org
Mar 12, 2018A remote code execution issue was discovered in GLPI through 9.2.1.CVE-2018-7562 · Other software · Glpi-project · reported by MITREHigh 7.5
A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.commembership.backbox.org
Jul 28, 2017SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.CVE-2017-11184 · Other software · Glpi-project · reported by MITRECritical 9.8
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 28, 2017front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.CVE-2017-11183 · Other software · Glpi-project · reported by MITREMedium 4.9
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 20, 2017GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.CVE-2017-11475 · Other software · Glpi-project · reported by MITREHigh 8.8
GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 20, 2017GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.CVE-2017-11474 · Other software · Glpi-project · reported by MITRECritical 9.8
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 19, 2017Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTMLCVE-2016-7509 · Other software · Glpi-project · reported by MITREMedium 5.4
Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 19, 2017Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an aCVE-2016-7507 · Other software · Glpi-project · reported by MITREHigh 8
Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2017GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.CVE-2017-11329 · Other software · Glpi-project · reported by MITRECritical 9.8
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 21, 2017Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character whenCVE-2016-7508 · Other software · Glpi-project · reported by MITREHigh 7.5
Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comexploit-db.com
Oct 5, 2015GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter toCVE-2015-7685 · Other software · Glpi-project · reported by MITREMedium 4
GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter to front/user.form.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgglpi-project.org
Oct 5, 2015Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an aCVE-2015-7684 · Other software · Glpi-project · reported by MITREHigh 9
Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgglpi-project.org
Apr 14, 2015Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a CVE-2014-8360 · Other software · Glpi-project · reported by MITREHigh 7.5
Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordadvisories.mageia.orgtlk.tuxfamily.org
Apr 14, 2015GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria inCVE-2014-5032 · Other software · Glpi-project · reported by MITREMedium 5
GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordadvisories.mageia.orgglpi-project.org
Dec 19, 2014SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condiCVE-2014-9258 · Other software · Glpi-project · reported by MITREMedium 6.5
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordadvisories.mageia.orglists.fedoraproject.org
May 27, 2014inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/tickeCVE-2013-2225 · Other software · Glpi-project · reported by Red HatMedium 6.4
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 14, 2014Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to aCVE-2013-2226 · Other software · Glpi-project · reported by Red HatHigh 7.5
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) table parameter to ajax/comments.php.
- Product
- Glpi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordglpi-project.orgsecurityfocus.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.