Remote file inclusion

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the subtype parameter...

CVE-2012-1037

CVE-2012-1037 is a PHP remote file inclusion vulnerability affecting GLPI 0.78 up to 0.80.61, where remote authenticated users can execute arbitrary PHP code via a URL supplied in the sub_type parameter of front/popup.php. The NVD entry lists a CVSSv2 base score of 6.5 (MEDIUM) with network acces...

GLPI 0.83.2 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in GLPI Version 0.83.2. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in GLPI Version 0.83.2 ------------------------------------------------------------------------...

CVE-2012-1037: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the subtype parameter...

Fedora Update for glpi FEDORA-2012-1519

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-1519 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for glpi FEDORA-2012-1519

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for glpi FEDORA-2012-1534

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-1534 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for glpi FEDORA-2012-1534

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : glpi-0.80.7-1.fc16 (2012-1519)

This version correct several bugs and a security bug CVE-2012-1037 You are strongly encouraged to update your actual version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

Fedora 15 : glpi-0.78.5-3.svn17464.fc15 (2012-1534)

This version correct several bugs and a security bug CVE-2012-1037 You are strongly encouraged to update your actual version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

[SECURITY] Fedora 16 Update: glpi-0.80.7-1.fc16

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 15 Update: glpi-0.78.5-3.svn17464.fc15

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Mandriva Update for glpi MDVSA-2012:016 (glpi)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for glpi MDVSA-2012:016 (glpi)

Check for the Version of glpi OpenVAS Vulnerability Test Mandriva Update for glpi MDVSA-2012:016 glpi Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for glpi MDVSA-2012:014 (glpi)

Check for the Version of glpi OpenVAS Vulnerability Test Mandriva Update for glpi MDVSA-2012:014 glpi Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for glpi MDVSA-2012:014 (glpi)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD : glpi -- remote attack via crafted POST request (7c769c89-53c2-11e1-8e52-00163e22ef61)

The GLPI project reports : The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

FreeBSD Ports: glpi

The remote host is missing an update to the system as announced in the referenced advisory. VID 7c769c89-53c2-11e1-8e52-00163e22ef61 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7c769c89-53c2-11e1-8e52-00163e22ef61 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[ MDVSA-2012:016 ] glpi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:016 http://www.mandriva.com/security/ Package : glpi Date : February 10, 2012 Affected: Enterprise Server 5.0 Problem Description: A File Inclusion vulnerability was discovered and corrected in GLPI. This...

FreeBSD Ports: glpi

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...