CVE-2019-13239

Mô tả

Tham khảo

• glpi-project/glpi commit c2aa7a7 · Patch
• glpi-project/glpi release 9.4.3 · Release Notes
• synacktiv.com/ressources/advisories/GLPI_9.4.0_stored_XSS.pdf · Exploit

Lỗ hổng khác của glpi

• CVE-2026-32312TRUNG BÌNH 4.3GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission…
• CVE-2026-29047CAO 8.8GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL i…
• CVE-2026-26263NGHIÊM TRỌNG 9.8GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based blind SQL injection exi…
• CVE-2026-26027TRUNG BÌNH 6.1GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload thro…
• CVE-2026-26026CAO 7.2GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. T…