Glpi@0.90.4 Security Vulnerabilities and Issues — Glpi@0.90.4 CVE List

Lucene search

Glpi-projectGlpi0.90.4

3 matches found

CVE•added 2017/06/21 8:29 p.m.•67 views

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

7.5CVSS8AI score0.00212EPSS

CVE•added 2017/07/19 1:29 p.m.•34 views

CVE-2016-7509

Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket.

5.4CVSS5AI score0.0015EPSS

CVE•added 2017/07/19 1:29 p.m.•33 views

CVE-2016-7507

Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

8CVSS7.5AI score0.0016EPSS