3071 matches found
UBUNTU-CVE-2019-10233
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie...
Design/Logic Flaw
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie...
Sql injection
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
CVE-2019-10232
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
CVE-2019-10231
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword inc/auth.class.php...
CVE-2019-10233
Teclib GLPI before 9.4.1.1 is affected by a timing attack related to a cookie. Affected software is Teclib GLPI; root cause is a timing-based vulnerability in cookie handling. The issue is documented across multiple sources (e.g., CVE-2019-10233) with remediation suggested by the GLPI 9.4.1.1 rel...
CVE-2019-10233
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie...
CVE-2019-10232
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
CVE-2019-10232
Teclib GLPI versions through 9.3.3 are vulnerable to an unauthenticated SQL injection flaw in the /scripts/unlock_tasks.php script. The root cause is the incorrect sanitization of user-controlled data provided via the "cycle" parameter, which allows an attacker to alter the semantic original SQL ...
CVE-2019-10231
CVE-2019-10231 affects Teclib GLPI
CVE-2019-10231
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword inc/auth.class.php...
CVE-2019-10233: Observable Discrepancy
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie...
CVE-2019-10232: Improper Neutralization of Special Elements used in an SQL Command
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
CVE-2019-10231: Access of Resource Using Incompatible Type
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword inc/auth.class.php...
glpi -- stored XSS
MITRE Corporation reports: inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
Fedora 28 : glpi (2018-c766d7c0f0)
add upstream patch to fix SQL injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Updated glpi packages fix security vulnerability
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php CVE-2018-13049...
MGASA-2018-0330 Updated glpi packages fix security vulnerability
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php CVE-2018-13049...
Fedora 27 : glpi (2018-cdccabb23d)
add upstream patch to fix SQL injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for glpi FEDORA-2018-cdccabb23d
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...