glpi vulnerabilities (Mageia)

19 vulnerabilities.

• glpi Mageia XSS in GLPI CVE-2020-11036 7.6 HighMay 5, 2020
• glpi Mageia weak CSRF tokens in GLPI CVE-2020-11035 7.5 HighMay 5, 2020
• glpi Mageia bypass of manageRedirect in GLPI CVE-2020-11034 6.1 MediumMay 5, 2020
• glpi Mageia Able to read any token through API user endpoint in GLPI CVE-2020-11033 6.6 MediumMay 5, 2020
• glpi Mageia Updated glpi packages fix security vulnerabilities MGASA-2020-0052 Fix available No scoreJanuary 28, 2020
• glpi Mageia The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL... CVE-2018-13049 Fix available 8.8 HighJuly 2, 2018
• glpi Mageia An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query... CVE-2018-7563 Fix available 6.1 MediumMarch 12, 2018
• glpi Mageia SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter. CVE-2017-11184 9.8 CriticalJuly 28, 2017
• glpi Mageia front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete... CVE-2017-11183 4.9 MediumJuly 28, 2017
• glpi Mageia GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front... CVE-2017-11475 8.8 HighJuly 20, 2017
• glpi Mageia GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class... CVE-2017-11474 9.8 CriticalJuly 20, 2017
• glpi Mageia GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an... CVE-2017-11329 9.8 CriticalJuly 14, 2017
• glpi Mageia Updated glpi packages fix a security vulnerability MGASA-2015-0204 Fix available No scoreMay 11, 2015
• glpi Mageia Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows... CVE-2014-8360 7.5 HighJanuary 9, 2015
• glpi Mageia GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote... CVE-2014-5032 5.0 MediumJanuary 9, 2015
• glpi Mageia SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote... CVE-2014-9258 Public exploit 6.5 MediumDecember 19, 2014
• glpi Mageia inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php... CVE-2013-5696 Public exploit 6.8 MediumSeptember 20, 2013
• glpi Mageia Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute... CVE-2013-2226 Public exploit 7.5 HighSeptember 20, 2013
• glpi Mageia inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary... CVE-2013-2225 Public exploit 6.4 MediumSeptember 20, 2013