| CVE-2019-1010307 | MEDIO5.4 | GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The attack vector is: 1- User Create a ticket , 2- Admin opens another ticket and cli | 15/07/2019 |
| CVE-2019-1010310 | BASSO3.5 | GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools > Reminder > Description .. Set the description to any iframe/f | 12/07/2019 |
| CVE-2019-13240 | MEDIO5.9 | An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address. | 10/07/2019 |
| CVE-2019-13239 | MEDIO6.1 | inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture. | 04/07/2019 |
| CVE-2019-10233 | ALTO8.1 | Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie. | 27/03/2019 |
| CVE-2018-13049 | ALTO8.8 | The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php. | 02/07/2018 |
| CVE-2018-7563 | MEDIO6.1 | An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code ca | 12/03/2018 |
| CVE-2018-7562 | ALTO7.5 | A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is prot | 12/03/2018 |
| CVE-2017-11184 | CRITICO9.8 | SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter. | 28/07/2017 |
| CVE-2017-11183 | MEDIO4.9 | front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter. | 28/07/2017 |
| CVE-2017-11475 | ALTO8.8 | GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php. | 20/07/2017 |
| CVE-2017-11474 | CRITICO9.8 | GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php. | 20/07/2017 |
| CVE-2016-7509 | MEDIO5.4 | Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket. | 19/07/2017 |
| CVE-2016-7507 | ALTO8.0 | Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application. | 19/07/2017 |
| CVE-2017-11329 | CRITICO9.8 | GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers. | 17/07/2017 |
| CVE-2016-7508 | ALTO7.5 | Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding. | 21/06/2017 |
| CVE-2015-7685 | MEDIO4.0 | GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter to front/user.form.php. | 05/10/2015 |
| CVE-2015-7684 | CRITICO9.0 | Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/. | 05/10/2015 |
| CVE-2014-8360 | ALTO7.5 | Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php. | 14/04/2015 |
| CVE-2014-5032 | MEDIO5.0 | GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar. | 14/04/2015 |