CVE-2022-31061

🗓️ 28 Jun 2022 17:55:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 176 Views🌐 WEB

GLPI Free Asset and IT Management Software with SQL injection vulnerabilit

Reporter	Title	Published	Views	Family All 114
ALT Linux	Security fix for the ALT Linux 10 package glpi version 9.5.8-alt1	7 Jul 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package glpi version 9.5.8-alt1	11 Jul 202200:00	–	altlinux
GithubExploit	Exploit for SQL Injection in Glpi-Project Glpi	15 Nov 202210:21	–	githubexploit
GithubExploit	Exploit for SQL Injection in Glpi-Project Glpi	15 Nov 202210:21	–	githubexploit
GithubExploit	Exploit for SQL Injection in Glpi-Project Glpi	9 Aug 202207:09	–	githubexploit
BDU FSTEC	GLPI XSS	10 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-31061	28 Jun 202222:42	–	circl
CNNVD	GLPI SQL injection vulnerability	28 Jun 202200:00	–	cnnvd
CNVD	GLPI SQL Injection Vulnerability (CNVD-2022-52290)	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-31061 SQL injection on login page in GLPI	28 Jun 202217:55	–	cvelist

NVD

Vulners

Node

glpi-project glpiRange9.3.0–9.5.8

glpi-project glpiRange10.0.0–10.0.2

[
  {
    "product": "glpi",
    "vendor": "glpi-project",
    "versions": [
      {
        "status": "affected",
        "version": ">= 9.3.0, < 9.5.8"
      },
      {
        "status": "affected",
        "version": ">= 10.0.0, < 10.0.2"
      }
    ]
  }
]

Source	Link
github	www.github.com/glpi-project/glpi/security/advisories/GHSA-w2gc-v2gm-q7wq
github	www.github.com/glpi-project/glpi/commit/21ae07d00d0b3230f6235386e98388cfc5bb0514