CVE-2019-1010310

GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools Reminder Description .. Set the...

PT-2019-11561

Name of the Vulnerable Software and Affected Versions: GLPI version 9.3.1 Description: The issue allows admins to phish users by injecting frame and form tags into reminder descriptions. This can lead to admins phishing any user or group of users for sensitive information such as credentials or...

CVE-2019-1010310: Improper Neutralization of Special Elements in Output Used by a Downstream Component

GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools Reminder Description .. Set the...