GLPI 0.83.7 Parameter Traversal Arbitrary File Access

GLPI v0.83.7 itemtype Parameter Traversal Arbitrary File Access Exploit Vendor: INDEPNET Development Team Product web page: http://www.glpi-project.org Affected version: 0.83.7 Summary: GLPI, an initialism for Gestionnaire libre de parc informatique Free Management of Computer Equipment, was...

GLPI v0.83.7 (itemtype) Parameter Traversal Arbitrary File Access Exploit

Summary GLPI, an initialism for Gestionnaire libre de parc informatique Free Management of Computer Equipment, was designed by Indepnet Association a non profit organisation in 2003. GLPI is a free asset and IT management software package, it also offers functionalities like servicedesk ITIL or...

GLPI v0.83.8 Multiple Error-based SQL Injection Vulnerabilities

Summary GLPI, an initialism for Gestionnaire libre de parc informatique Free Management of Computer Equipment, was designed by Indepnet Association a non profit organisation in 2003. GLPI is a free asset and IT management software package, it also offers functionalities like servicedesk ITIL or...

CVE-2012-4003

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4003

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4002

CVE-2012-4002 affects GLPI-PROJECT GLPI before 0.83.3, where a Cross-Site Request Forgery (CSRF) vulnerability could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The issue is documented across multiple sources, with NVD assigning a CVSS v2 base s...

CVE-2012-4003

CVE-2012-4003 affects GLPI-Project GLPI up to version 0.83.3, where multiple XSS vulnerabilities allow remote attackers to inject arbitrary script or HTML via unknown vectors. The weakness is tied to GLPI prior to 0.83.3 as reported in NVD/NVD-derived records. The Mandriva advisory MDVSA-2012:132...

CVE-2012-4003

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4002: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4003: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

[ MDVSA-2012:132 ] glpi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:132 http://www.mandriva.com/security/ Package : glpi Date : August 15, 2012 Affected: Enterprise Server 5.0 Problem Description: Multiple cross-site request forgery CSRF and cross-site scripting XSS flaws ha...

Fedora Update for glpi-pdf FEDORA-2012-10661

Check for the Version of glpi-pdf OpenVAS Vulnerability Test Fedora Update for glpi-pdf FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661

Check for the Version of glpi-mass-ocs-import OpenVAS Vulnerability Test Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for glpi FEDORA-2012-10661

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for glpi FEDORA-2012-10661

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...