Sql injection

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...

CVE-2019-12723

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...

CVE-2019-12723

The CVE-2019-12723 entry concerns the Teclib Fields plugin for GLPI (affected version up to 1.9.2). The issue is a SQL Injection via container_id and old_order parameters to ajax/reorder.php that can be exploited by an unauthenticated user. Impact is described in the sources as high/critical (CVS...

CVE-2019-13240: Weak Password Recovery Mechanism for Forgotten Password

An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address...

CVE-2019-12723: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...

CVE-2019-12724: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $POST'name' parameter...

GLPI Cross-Site Scripting Vulnerability (CNVD-2019-21438)

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A cross-site scripting vulnerability exists in the inc/user.class.php file i...

CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

UBUNTU-CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

Cross site scripting

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

CVE-2019-13239

Vulnerability overview : GLPI

CVE-2019-13239: Improper Neutralization of Input During Web Page Generation

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

Fedora Update for glpi FEDORA-2019-169f1eec7c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: glpi-9.3.4-2.fc29

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Fedora 29 : glpi (2019-169f1eec7c)

Includes security fix backported from 9.4.3 - security Prevent execution of XSS on rich text, - security Prevent xss attack on user picture, Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora Update for glpi FEDORA-2019-2bad806189

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 30 Update: glpi-9.4.3-1.fc30

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...