CVE-2026-54596

CVE-2026-54596 - Inyección SQL autenticada a través del parámetro recurringinvoicefrequency permite la exfiltración completa de la base de datos Severidad: Alta Aviso: GHSA-f9m3-qjc9-v27j Corregido en: Commit 7211426 Autor: iltosec Resumen Una vulnerabilidad de inyección SQL en el endpoint de...

Exploit for CVE-2026-54596

CVE-2026-54596 - Authenticated SQL Injection via recurringinv...

PT-2023-3259 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.13 GLPI versions prior to 10.0.7 Description: The issue is related to a lack of authorization, allowing a user with the Technician profile to view and generate a personal token for a Super-Admin. This can be exploit...