3 matches found
CVE-2017-11184
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter...
9.8CVSS0.01829EPSS
SaveExploits0References3
PT-2017-11806
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5 Description A SQL injection issue exists in the front/devicesoundcard.php file via the start parameter. Recommendations For versions prior to 9.1.5, update to version 9.1.5 or later to resolve the issue...
9.8CVSS0.01829EPSS
SaveExploits0References23
CVE-2017-11184: Improper Neutralization of Special Elements used in an SQL Command
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter...
9.8CVSS5.8AI score0.01829EPSS
SaveExploits0References2
20