7 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-10232
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Teclib GLPI through 9.3.3 has SQL injection via the cycle parameter in /scripts/unlocktasks.php. CVE-2019-10232 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2019-7336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view monitorfilters.php contains takes in input from the user and saves it in...
VulnCheck KEV: CVE-2019-10232
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
Teclib GLPI SQL Injection Vulnerability
Teclib GLPI is an IT asset management solution. A SQL injection vulnerability exists in Teclib GLPI version 9.3.3 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'cycle' parameter of the /scripts/unlocktasks.php file...
UBUNTU-CVE-2019-10232
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
CVE-2019-10232
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
PT-2019-11647
Name of the Vulnerable Software and Affected Versions: Teclib GLPI versions prior to 9.3.4 Description: The issue is related to SQL injection via the cycle parameter in the "/scripts/unlock tasks.php" API endpoint. Recommendations: For versions prior to 9.3.4, update to version 9.3.4 or later to...