GLPI SQL Injection Account Modification

The vulnerability of the GLPI system for requests, incidents, and computer equipment inventory management is related to the improper elimination of certain elements used in SQL commands. Exploiting this vulnerability allows a malicious actor to remotely modify another user’s account data and gain...

GLPI Inventory Loading Dangerous Files

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the unlimited ability to upload dangerous files. Exploiting this vulnerability allows a malicious actor to upload any files into the system...