GLPI Inventory Plugin 跨站脚本漏洞

GLPI Inventory Plugin is an open source plugin for GLPI France. It is used to handle various types of tasks for GLPI agents. A cross-site scripting vulnerability exists in GLPI Inventory Plugin versions prior to 1.5.0, which stems from reflective cross-site scripting and could lead to the executi...

CVE-2025-26626: Improper Neutralization of Input During Web Page Generation

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue...

PT-2025-11260

Name of the Vulnerable Software and Affected Versions: GLPI Inventory Plugin versions prior to 1.5.0 Description: The issue concerns the GLPI Inventory Plugin, which is part of the GLPI asset and IT management software package. It handles various tasks for GLPI agents. The problem is related to...

GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi

GLPI use auxiliary/gather/glpi/inventorypluginunauthsqli msf undefinedinventorypluginunauthsqli show actions ...actions... msf undefinedinventorypluginunauthsqli set ACTION msf undefinedinventorypluginunauthsqli show options ...show and set options... msf undefinedinventorypluginunauthsqli run Th...

CVE-2023-36808: Improper Neutralization of Special Elements used in an SQL Command

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. As a workaround, one may disable native...

CVE-2022-31082: Improper Neutralization of Special Elements used in an SQL Command

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inventory-plugin is a plugin for GLPI to handle inventory management. In affected versions a SQL injection can be made using package deployment tasks...

GLPI Inventory Plugin 路径遍历漏洞

GLPI Inventory Plugin is a French GLPI open source plugin . It is used to handle various types of tasks for GLPI agents. A path traversal vulnerability exists in versions prior to GLPI Inventory Plugin 1.0.2, which stems from a public script that can be used to read the contents of system files...