CVE-2026-54596

CVE-2026-54596 - Iniezione SQL autenticata tramite il parametro recurringinvoicefrequency consente l'esfiltrazione completa del database Gravità: Alta Advisory: GHSA-f9m3-qjc9-v27j Corretto in: Commit 7211426 Autore: iltosec Riepilogo Una vulnerabilità di SQL injection nell'endpoint di creazione...

Exploit for CVE-2026-54596

CVE-2026-54596 - Authenticated SQL Injection via recurringinv...

PT-2023-3259 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.13 GLPI versions prior to 10.0.7 Description: The issue is related to a lack of authorization, allowing a user with the Technician profile to view and generate a personal token for a Super-Admin. This can be exploit...