CVE-2013-2226

Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the 1 usersidassign parameter to ajax/ticketassigninformation.php, 2 filename parameter to front/document.form.php, or 3 table parameter to ajax/comments.php...

CVE-2013-2226: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the 1 usersidassign parameter to ajax/ticketassigninformation.php, 2 filename parameter to front/document.form.php, or 3 table parameter to ajax/comments.php...

PT-2014-2575

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 0.83.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the users id assign parameter to "ajax/ticketassigninformation.php", the filename parameter to...