CVE-2017-11329

GLPI before 9.1.5 is vulnerable to SQL injection via an ajax/getDropdownValue.php request where entity_restrict is not a list of integers. The issue is documented across multiple feeds; remediation is to upgrade to GLPI 9.1.5 or newer (e.g., 9.1.6 per Mageia update), which fixes the vulnerability...

PT-2017-11928

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.1.5 Description The issue allows SQL injection via an "ajax/getDropdownValue.php" request with an entity restrict parameter that is not a list of integers. Recommendations For versions prior to 9.1.5, update to version...

GLPI 0.90.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4 Exploit Author: Eric CARTER in/ericcarterengineer - CS c-s.fr Vendor Homepage: http://glpi-project.org Software Link: http://glpi-project.org/spip.php?article3 Version: 0.90....

GLPI 0.90.4 SQLi Vulnerability

GLPI is prone to an SQL injection SQLi vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:glpi-project:glpi"; if...

GLPI 0.90.4 SQL Injection

Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4 Date: 2016/09/09 Exploit Author: Eric CARTER in/ericcarterengineer - CS c-s.fr Vendor Homepage: http://glpi-project.org Software Link: http://glpi-project.org/spip.php?article3 Version: 0.90.4 Tested on: GLPI 0.90.4 running on a...

GLPI 0.90.4 - SQL Injection

GLPI 0.90.4 - SQL Injection Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4 Date: 2016/09/09 Exploit Author: Eric CARTER in/ericcarterengineer - CS c-s.fr Vendor Homepage: http://glpi-project.org Software Link: http://glpi-project.org/spip.php?article3 Version: 0.90.4 Tested...

GLPI 0.90.4 - SQL Injection

Exploit Title: Multiple SQL injection vulnerabilities in GLPI 0.90.4 Date: 2016/09/09 Exploit Author: Eric CARTER in/ericcarterengineer - CS c-s.fr Vendor Homepage: http://glpi-project.org Software Link: http://glpi-project.org/spip.php?article3 Version: 0.90.4 Tested on: GLPI 0.90.4 running on a...

GLPI SQL Injection Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in GLPI version 0.90.4. A remote...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

Sql injection

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

UBUNTU-CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

CVE-2016-7508

GLPI 0.90.4 contains multiple SQL injection vulnerabilities that can be exploited by an authenticated remote attacker to execute arbitrary SQL commands when the database uses BIG5 encoding. The exploitation paths reference the GLPI code path inc/dbmysql.class.php (SET NAMES encoding) and are demo...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

PT-2017-9214

Name of the Vulnerable Software and Affected Versions GLPI version 0.90.4 Description The issue allows an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding. This is due to multiple SQL injection...

CVE-2016-7508: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

glpi-project.org XSS vulnerability

Vulnerable URL: http://www.glpi-project.org/spip.php?breve302autresbreves=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 116022 VIP website status:| No Check glpi-project.org SSL connection:| Grade: A+...