EUVD-2019-2281

Malware in sbrugna...

CVE-2019-10477

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

Teclib GLPI FusionInventory plugin code issue vulnerability

Teclib GLPI is an open source IT asset management suite from Teclib France. The suite includes device status management, asset inventory storage, management processes and work log management, etc. FusionInventory is used in one of the asset information update plug-in . A code issue vulnerability...

Code injection

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

CVE-2019-10477

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

CVE-2019-10477

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

CVE-2019-10477

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions...

CVE-2019-10477

The CVE covers the FusionInventory plugin for GLPI, where versions before 1.4 (GLPI 9.3.x) and before 1.1 (GLPI 9.4.x) mishandle sendXML actions. The issue is tied to the plugin’s handling of XML-sending actions, with public references indicating available fixes in the same project’s GLPI branche...