PT-2019-12899

Name of the Vulnerable Software and Affected Versions GLPI Teclib Fields plugin versions through 1.9.2 Description The issue allows SQL Injection via the container id and old order parameters to the "ajax/reorder.php" endpoint by an unauthenticated user. Recommendations For versions through 1.9.2...