CVE-2019-10231

Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword inc/auth.class.php...

CVE-2019-10231

CVE-2019-10231 affects Teclib GLPI

CVE-2019-10232: Improper Neutralization of Special Elements used in an SQL Command

Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...

CVE-2019-10231: Access of Resource Using Incompatible Type

Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword inc/auth.class.php...

PT-2019-11648

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.4.1.1 Description: The issue is related to a timing attack associated with a cookie. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

CVE-2019-10233: Observable Discrepancy

Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie...

PT-2019-11646

Name of the Vulnerable Software and Affected Versions: Teclib GLPI versions prior to 9.4.1.1 Description: The issue allows bypass of authentication due to a PHP type juggling vulnerability. This occurs in the checkPassword function, which is located in the auth.class.php file. Recommendations: Fo...

PT-2019-11647

Name of the Vulnerable Software and Affected Versions: Teclib GLPI versions prior to 9.3.4 Description: The issue is related to SQL injection via the cycle parameter in the "/scripts/unlock tasks.php" API endpoint. Recommendations: For versions prior to 9.3.4, update to version 9.3.4 or later to...

glpi -- stored XSS

MITRE Corporation reports: inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

Fedora 28 : glpi (2018-c766d7c0f0)

add upstream patch to fix SQL injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

MGASA-2018-0330 Updated glpi packages fix security vulnerability

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php CVE-2018-13049...

Updated glpi packages fix security vulnerability

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php CVE-2018-13049...

Fedora 27 : glpi (2018-cdccabb23d)

add upstream patch to fix SQL injection Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for glpi FEDORA-2018-c766d7c0f0

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for glpi FEDORA-2018-cdccabb23d

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: glpi-9.2.4-2.fc28

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 27 Update: glpi-9.1.7.1-3.fc27

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

CVE-2018-13049

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...

CVE-2018-13049

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...

CVE-2018-13049

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...