CVE-2016-7508

Summary

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/glpi-project/glpi/issues/1047
• https://www.exploit-db.com/exploits/42262/

References

• https://github.com/glpi-project/glpi/issues/1047
• https://www.exploit-db.com/exploits/42262/

• ←Previous
• Next→