Mageia: Security Advisory (MGASA-2018-0135)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2017-11329

GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entityrestrict parameter that is not a list of integers...

CVE-2017-11329

GLPI before 9.1.5 is vulnerable to SQL injection via an ajax/getDropdownValue.php request where entity_restrict is not a list of integers. The issue is documented across multiple feeds; remediation is to upgrade to GLPI 9.1.5 or newer (e.g., 9.1.6 per Mageia update), which fixes the vulnerability...