Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

glpi-project glpi 0.80 vulnerabilities and exploits

(subscribe to this query)
578
VMScore
CVE-2012-1037
PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 up to and including 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter.
Glpi-project Glpi 0.80Glpi-project Glpi 0.80.1Glpi-project Glpi 0.80.2Glpi-project Glpi 0.80.3Glpi-project Glpi 0.78Glpi-project Glpi 0.78.1Glpi-project Glpi 0.78.3Glpi-project Glpi 0.78.5Glpi-project Glpi 0.80.4Glpi-project Glpi 0.80.6Glpi-project Glpi 0.78.2Glpi-project Glpi 0.78.4Glpi-project Glpi 0.80.5Glpi-project Glpi 0.80.61
445
VMScore
CVE-2011-2720
The autocompletion functionality in GLPI prior to 0.80.2 does not blacklist certain username and password fields, which allows remote malicious users to obtain sensitive information via a crafted POST request.
Glpi-project GlpiGlpi-project Glpi 0.80Glpi-project Glpi 0.72.4Glpi-project Glpi 0.72.3Glpi-project Glpi 0.72.2Glpi-project Glpi 0.71.5Glpi-project Glpi 0.71.4Glpi-project Glpi 0.71.1Glpi-project Glpi 0.78.1Glpi-project Glpi 0.78Glpi-project Glpi 0.72Glpi-project Glpi 0.70Glpi-project Glpi 0.68.3Glpi-project Glpi 0.68.2Glpi-project Glpi 0.65Glpi-project Glpi 0.5Glpi-project Glpi 0.78.3Glpi-project Glpi 0.78.2Glpi-project Glpi 0.71.6Glpi-project Glpi 0.71Glpi-project Glpi 0.68Glpi-project Glpi 0.51a
383
VMScore
CVE-2012-4003
Multiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI prior to 0.83.3 allow remote malicious users to inject arbitrary web script or HTML via unknown vectors.
Glpi-project Glpi 0.68.1Glpi-project Glpi 0.68.2Glpi-project Glpi 0.71.1Glpi-project Glpi 0.80.2Glpi-project Glpi 0.70.1Glpi-project Glpi 0.72Glpi-project Glpi 0.72.3Glpi-project Glpi 0.20Glpi-project Glpi 0.72.1Glpi-project Glpi 0.72.2Glpi-project Glpi 0.78.3Glpi-project Glpi 0.40Glpi-project Glpi 0.6Glpi-project Glpi 0.65Glpi-project Glpi 0.5Glpi-project Glpi 0.51Glpi-project Glpi 0.68.3Glpi-project Glpi 0.70Glpi-project Glpi 0.80.3Glpi-project Glpi 0.80.6Glpi-project Glpi 0.71.2Glpi-project Glpi 0.71.6
605
VMScore
CVE-2012-4002
Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI prior to 0.83.3 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Glpi-project Glpi 0.70Glpi-project Glpi 0.68.1Glpi-project Glpi 0.80.3Glpi-project Glpi 0.71.1Glpi-project Glpi 0.80.6Glpi-project Glpi 0.70.1Glpi-project Glpi 0.72Glpi-project Glpi 0.72.3Glpi-project Glpi 0.72.1Glpi-project Glpi 0.31Glpi-project Glpi 0.78.3Glpi-project Glpi 0.6Glpi-project Glpi 0.5Glpi-project Glpi 0.68.3Glpi-project Glpi 0.71Glpi-project Glpi 0.80.4Glpi-project Glpi 0.80.61Glpi-project Glpi 0.71.3Glpi-project Glpi 0.71.2Glpi-project Glpi 0.30Glpi-project Glpi 0.71.6Glpi-project Glpi 0.80.1
645
VMScore
CVE-2013-2225
inc/ticket.class.php in GLPI 0.83.9 and previous versions allows remote malicious users to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.
Glpi-project Glpi 0.21Glpi-project Glpi 0.30Glpi-project Glpi 0.31Glpi-project Glpi 0.40Glpi-project Glpi 0.65Glpi-project Glpi 0.68Glpi-project Glpi 0.71.1Glpi-project Glpi 0.5Glpi-project Glpi 0.51Glpi-project Glpi 0.51aGlpi-project Glpi 0.6Glpi-project Glpi 0.70Glpi-project Glpi 0.72Glpi-project Glpi 0.72.1Glpi-project Glpi 0.83.6Glpi-project Glpi 0.83.5Glpi-project Glpi 0.83.4Glpi-project Glpi 0.83.31Glpi-project Glpi 0.42Glpi-project Glpi 0.68.2Glpi-project Glpi 0.70.2Glpi-project Glpi 0.71.3
690
VMScore
CVE-2013-5696
inc/central.class.php in GLPI prior to 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote malicious users to conduct cross-site request forgery (CSRF) attacks, and (1) perform a SQL injection via an Etape_4 acti...
Glpi-project Glpi 0.83.8Glpi-project Glpi 0.83.9Glpi-project Glpi 0.83.91Glpi-project Glpi 0.84Glpi-project Glpi 0.80.4Glpi-project Glpi 0.80.3Glpi-project Glpi 0.80.2Glpi-project Glpi 0.80.1Glpi-project Glpi 0.72Glpi-project Glpi 0.71.6Glpi-project Glpi 0.71.5Glpi-project Glpi 0.70Glpi-project Glpi 0.68.3Glpi-project Glpi 0.68.2Glpi-project Glpi 0.51Glpi-project Glpi 0.5Glpi-project Glpi 0.83.31Glpi-project Glpi 0.83.3Glpi-project Glpi 0.83.2Glpi-project Glpi 0.83.1Glpi-project Glpi 0.83Glpi-project Glpi 0.78.2
NA
CVE-2023-36808
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. As a workaround, one m...
Glpi-project Glpi
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook