EUVD-2018-4999

Malware in sbrugna...

CVE-2018-13049

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...

CVE-2018-13049

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php...

CVE-2018-13049

CVE-2018-13049 affects GLPI 9.2.x through 9.3.0, where the constructSQL function in inc/search.class.php allows SQL Injection via a crafted LIMIT clause to front/computer.php. Connected advisories confirm the root cause (constructSQL in GLPI) and that upstream patches were released to fix the vul...