CVE-2017-11183

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...

CVE-2017-11183: Improper Input Validation

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...

PT-2017-11805

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5 Description The issue allows remote authenticated administrators to delete arbitrary files by crafting the file parameter in the front/backup.php script. Recommendations For versions prior to 9.1.5, update to versi...