CVE-2013-2225

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the predefinedfields parameter to front/ticket.form.php...

PT-2014-2574

Name of the Vulnerable Software and Affected Versions GLPI versions 0.83.9 and earlier Description The issue allows remote attackers to unserialize arbitrary PHP objects. This is achieved via the predefined fields parameter to the "front/ticket.form.php" endpoint. Recommendations For GLPI version...