CVE-2013-2226

Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the 1 usersidassign parameter to ajax/ticketassigninformation.php, 2 filename parameter to front/document.form.php, or 3 table parameter to ajax/comments.php...

CVE-2013-2226: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the 1 usersidassign parameter to ajax/ticketassigninformation.php, 2 filename parameter to front/document.form.php, or 3 table parameter to ajax/comments.php...

PT-2014-2575

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 0.83.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the users id assign parameter to "ajax/ticketassigninformation.php", the filename parameter to...

GLPI 0.83.8 SQL Injection

GLPI v0.83.8 Multiple Error-based SQL Injection Vulnerabilities Vendor: INDEPNET Development Team Product web page: http://www.glpi-project.org Affected version: 0.83.7 and 0.83.8 Summary: GLPI, an initialism for Gestionnaire libre de parc informatique Free Management of Computer Equipment, was...