CVE-2019-12723

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...

CVE-2019-12723: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...

PT-2019-12899

Name of the Vulnerable Software and Affected Versions GLPI Teclib Fields plugin versions through 1.9.2 Description The issue allows SQL Injection via the container id and old order parameters to the "ajax/reorder.php" endpoint by an unauthenticated user. Recommendations For versions through 1.9.2...