CVE-2014-9258

🗓️ 19 Dec 2014 15:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 68 Views🌐 WEB

SQL injection vulnerability in GLPI before 0.85.

Reporter	Title	Published	Views	Family All 29
0day.today	GLPI 0.85 - Blind SQL Injection Vulnerability	18 Dec 201400:00	–	zdt
Cvelist	CVE-2014-9258	19 Dec 201415:00	–	cvelist
Exploit DB	GLPI 0.85 - Blind SQL Injection	15 Dec 201400:00	–	exploitdb
EUVD	EUVD-2014-9083	7 Oct 202500:30	–	euvd
exploitpack	GLPI 0.85 - Blind SQL Injection	15 Dec 201400:00	–	exploitpack
Fedora	[SECURITY] Fedora 21 Update: glpi-0.84.8-4.fc21	5 Apr 201514:34	–	fedora
Fedora	[SECURITY] Fedora 20 Update: glpi-0.84.8-3.fc20	1 Jan 201508:54	–	fedora
Fedora	[SECURITY] Fedora 19 Update: glpi-0.83.9.1-5.fc19	1 Jan 201508:58	–	fedora
Fedora	[SECURITY] Fedora 21 Update: glpi-0.84.8-3.fc21	1 Jan 201508:56	–	fedora
Fedora	[SECURITY] Fedora 20 Update: glpi-0.84.8-4.fc20	5 Apr 201514:30	–	fedora

NVD

Node

glpi-project glpiRange≤0.85

Source	Link
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-January/147296.html
advisories	www.advisories.mageia.org/MGASA-2015-0017.html
exploit-db	www.exploit-db.com/exploits/35528
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-January/147271.html
glpi-project	www.glpi-project.org/spip.php
security	www.security.szurek.pl/glpi-085-blind-sql-injection.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-January/147313.html
secunia	www.secunia.com/advisories/61367
osvdb	www.osvdb.org/show/osvdb/115957
mandriva	www.mandriva.com/security/advisories

Parameter	Position	Path	Description	CWE
condition	query param	ajax/getDropdownValue.php	SQL injection vulnerability in ajax/getDropdownValue.php via condition parameter (CVE-2014-9258).	CWE-89

06 May 2026 22:30Current

7.8High risk

Vulners AI Score7.8

CVSS 26.5

EPSS0.09123

cve-2014-9258 sql injection glpi security vulnerability nvd