GLPI SQL Injection Vulnerability (CNVD-2018-12547)

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in the 'constructSQL' function of t...