CVE-2025-21626

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...

SQL Injection Vulnerability in FiyoCMS status.php File

FiyoCMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the FiyoCMS status.php file. An attacker can exploit the vulnerability to obtain sensitive database information...