3411 matches found
CVE-2017-11183
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...
CVE-2017-11183
GLPI prior to 9.1.5 is affected by CVE-2017-11183: remote authenticated administrators can delete arbitrary files through a crafted file parameter in front/backup.php. Root cause: improper handling of the file parameter leading to arbitrary file deletion. Mitigation: upgrade GLPI to a fixed relea...
PT-2017-11805
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5 Description The issue allows remote authenticated administrators to delete arbitrary files by crafting the file parameter in the front/backup.php script. Recommendations For versions prior to 9.1.5, update to versi...
PT-2017-11806
Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5 Description A SQL injection issue exists in the front/devicesoundcard.php file via the start parameter. Recommendations For versions prior to 9.1.5, update to version 9.1.5 or later to resolve the issue...
CVE-2017-11183: Improper Input Validation
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...
CVE-2017-11184: Improper Neutralization of Special Elements used in an SQL Command
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter...
Fedora Update for glpi FEDORA-2017-cc0b92f6c1
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : glpi (2017-cc0b92f6c1)
Last upstream release with security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 26 : glpi (2017-a40590256c)
Last upstream release with security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] Fedora 25 Update: glpi-9.1.5-1.fc25
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
[SECURITY] Fedora 26 Update: glpi-9.1.5-1.fc26
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
GLPI '$crit' Variable SQL Injection Vulnerability
GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in the '$crit' variable in the...
CVE-2017-11474
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computersoftwareversion.class.php, exploitable via ajax/common.tabs.php...
CVE-2017-11475
GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...
Sql injection
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computersoftwareversion.class.php, exploitable via ajax/common.tabs.php...
Sql injection
GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...
CVE-2017-11475
GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php...
CVE-2017-11474
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computersoftwareversion.class.php, exploitable via ajax/common.tabs.php...
