Skip to contentGlpi-project vulnerabilities
Newest
- glpi-project glpiSQL Injection in glpiCVE-2020-151087.1 High
- glpi-project glpiRemote Code Execution in GLPICVE-2020-11060Public exploitEPSS 10.7%7.4 High
- glpiReflexive XSS in GLPICVE-2020-110626.0 Medium
- glpi-project glpiPublic GLPIKEY can be used to decrypt any data in GLPICVE-2020-5248Public exploit7.2 High
- glpi-project glpiXSS in GLPICVE-2020-110367.6 High
- glpi-project glpi, fedoraproject fedora +1 moreweak CSRF tokens in GLPICVE-2020-110357.5 High
- glpi-project glpibypass of manageRedirect in GLPICVE-2020-110346.1 Medium
- glpi-project glpi, fedoraproject fedora +1 moreAble to read any token through API user endpoint in GLPICVE-2020-110336.6 Medium
- glpi-project glpiSQL injection on addme_observer and addme_assign in GLPICVE-2020-110327.6 High
- glpi-project glpi, debian linux +1 moreGLPI 0.83.7 has Local File Inclusion in common.tabs.php.CVE-2013-2227Public exploitEPSS 13.0%7.5 High
- glpi-project glpiGLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php...CVE-2019-146668.8 High
- glpi product, glpi-project glpi +1 moreGLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown...CVE-2019-10103075.4 Medium
- glpi product, glpi-project glpi +1 moreGLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish...CVE-2019-10103103.5 Low
- glpi-project glpiAn issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is...CVE-2019-132405.9 Medium
- glpi-project glpiinc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.CVE-2019-132396.1 Medium
- glpi-project glpiTeclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.CVE-2019-102338.1 High
- glpi-project glpiThe constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL...CVE-2018-13049Fix available8.8 High
- glpi-project glpiAn issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query...CVE-2018-7563Fix available6.1 Medium
- glpi-project glpiA remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition...CVE-2018-75627.5 High
- glpi-project glpiSQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.CVE-2017-111849.8 Critical
- glpi-project glpifront/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete...CVE-2017-111834.9 Medium
- glpi-project glpiGLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front...CVE-2017-114758.8 High
- glpi-project glpiGLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class...CVE-2017-114749.8 Critical
- glpi-project glpiCross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to...CVE-2016-75095.4 Medium
- glpi-project glpiCross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated...CVE-2016-75078.0 High
- glpi-project glpiGLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an...CVE-2017-113299.8 Critical
- glpi-project glpiMultiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to...CVE-2016-7508Public exploit7.5 High
- glpi-project glpiGLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging...CVE-2015-76854.0 Medium
- glpi-project glpiUnrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute...CVE-2015-76849.0 High
- glpi-project glpiDirectory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows...CVE-2014-83607.5 High
- glpi-project glpiGLPI before 0.84.7 does not properly restrict access to cost information, which allows remote...CVE-2014-50325.0 Medium
- glpi-project glpiSQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote...CVE-2014-9258Public exploit6.5 Medium
- glpi-project glpiinc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php...CVE-2013-5696Public exploit6.8 Medium
- glpi-project glpiMultiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute...CVE-2013-2226Public exploit7.5 High
- glpi-project glpiinc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary...CVE-2013-2225Public exploit6.4 Medium
- glpi-project glpiMultiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow...CVE-2012-40034.3 Medium
- glpi-project glpiCross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote...CVE-2012-40026.8 Medium
- glpi-project glpiPHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows...CVE-2012-10376.5 Medium
- glpi-project glpiThe autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and...CVE-2011-27205.0 Medium