CVE-2021-3486

Description

References

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• Kitsun3Sec/exploits · Third Party Advisory
• n3k00n3.github.io/blog/09042021/glpi_xss.html · Exploit

glpi 的其他漏洞

• CVE-2026-32312中危 4.3GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission…
• CVE-2026-29047高危 8.8GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user can perform a SQL i…
• CVE-2026-26263严重 9.8GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based blind SQL injection exi…
• CVE-2026-26027中危 6.1GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store an XSS payload thro…
• CVE-2026-26026高危 7.2GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administrator lead to RCE. T…