Exploit for Injection in Glpi-Project Glpi

CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914, a co...

CVE-2022-35914: Improper Neutralization of Special Elements in Output Used by a Downstream Component

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection...

PT-2022-23020

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 10.0.3 Description The htmlawed module in GLPI contains an issue related to improper input validation and code generation management. This allows a remote attacker to perform PHP code injection via the endpoint...