Exploit for Use of Hard-coded Credentials in Glpi-Project Glpi

CVE-2020-5248 POC 환경 구성 및 테스트 입니다. 테스트 방법 - 환경 구성 v...

Exploit for Injection in Glpi-Project Glpi

CVE-2020-11060 This script is a Python 3.x based exploit for...

glpi-project.org XSS vulnerability

Vulnerable URL: http://www.glpi-project.org/spip.php?breve302autresbreves=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 116022 VIP website status:| No Check glpi-project.org SSL connection:| Grade: A+...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4002

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4003

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2012-4002

CVE-2012-4002 affects GLPI-PROJECT GLPI before 0.83.3, where a Cross-Site Request Forgery (CSRF) vulnerability could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The issue is documented across multiple sources, with NVD assigning a CVSS v2 base s...

CVE-2012-4003: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2012-4002: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2012-5129

Name of the Vulnerable Software and Affected Versions GLPI-PROJECT GLPI versions prior to 0.83.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations For versio...

glpi -- SQL Injection

The GLPI project reports: Input passed via unspecified parameters is not properly sanitised before being used in SQL queries. This can be exploited to manipulateSQL queries by injecting arbitrary SQL code...