Lucene search
PRIOn knowledge basePRION:CVE-2020-15176HistoryOct 07, 2020 - 7:15 p.m.
Sql injection
2020-10-0719:15:00
PRIOn knowledge base
www.prio-n.com
3
In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulnerability an attacker is able to exfiltrate sensitive information like passwords, reset tokens, personal details, and more. The issue is patched in version 9.5.2
Related
nessus
nessus
cvelist
cvelist
CVE-2020-15176 SQL injection in GLPI
2020-10-07 18:55:12
ubuntucve
ubuntucve
CVE-2020-15176
2020-10-07 00:00:00
nvd
nvd
CVE-2020-15176
2020-10-07 19:15:12
cve
cve
CVE-2020-15176
2020-10-07 19:15:12
freebsd
freebsd
glpi -- Multiple SQL Injections Stemming From isNameQuoted()
2020-06-25 00:00:00
osv
osv
CVE-2020-15176
2020-10-07 19:15:12
altlinux
altlinux
Security fix for the ALT Linux 10 package glpi version 9.5.2-alt1
2020-10-26 00:00:00
Security fix for the ALT Linux 9 package glpi version 9.5.2-alt1
2020-10-26 00:00:00