Security Advisory

CVE-2018-13049

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-02 11:00:00

Last updated 2024-08-05 08:52:50

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.

← Browse all CVEs View on cve.org ↗