Multiple SQL injection vulnerabilities in GLPI prior to 0.83.9 allow remote malicious users to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) table parameter to ajax/comments.php.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
glpi-project glpi |
||
glpi-project glpi 0.83.7 |
||
glpi-project glpi 0.83.6 |
||
glpi-project glpi 0.83.5 |
||
glpi-project glpi 0.83.1 |
||
glpi-project glpi 0.83 |
||
glpi-project glpi 0.83.4 |
||
glpi-project glpi 0.83.3 |
||
glpi-project glpi 0.83.31 |
||
glpi-project glpi 0.83.2 |
Vulmon