10 matches found
The vulnerability of the plugin for the GLPI system, Mreporting, relates to the lack of security measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the Mreporting plugin for the GLPI system is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20260417-73-0009
Vulnerability in glpi-plugin-mreporting related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-22821
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821 mreporting affected by a SQLI on date change
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821
CVE-2026-22821 affects the GLPI mreporting plugin (prior to 1.9.4). The vulnerability is an SQL injection triggered by a date change in mreporting, with potential impact to confidentiality (HIGH) and no impact to integrity/availability per the provided metrics. Upgrading to version 1.9.4 fixes th...
CVE-2026-22821 mreporting affected by a SQLI on date change
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821 mreporting affected by a SQLI on date change
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...
CVE-2026-22821: Improper Neutralization of Special Elements used in an SQL Command
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4...