Security Advisory

CVE-2017-11329

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-14 16:00:00

Last updated 2024-09-16 18:03:33

Assigner mitre

CVSS score not scored

State PUBLISHED

GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.