Lucene search

K
osvGoogleOSV:CVE-2018-13049
HistoryJul 02, 2018 - 11:29 a.m.

CVE-2018-13049

2018-07-0211:29:00
Google
osv.dev
6

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

37.0%

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

37.0%