CVE-2016-7508

2017-06-2120:00:00

mitre

www.cve.org

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

47.7%

JSON

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

References

github.com/glpi-project/glpi/issues/1047

www.exploit-db.com/exploits/42262/