Lucene search
Glpi-projectGlpi9.1.4
3 matches found
CVE-2017-11184
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.
9.8CVSS9.8AI score0.00266EPSS
Web
CVE-2017-11329
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.
9.8CVSS9.8AI score0.00288EPSS
Web
CVE-2017-11183
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
5.5CVSS5.7AI score0.00414EPSS
Web