Glpi-project vulnerabilities
188 CVEs and advisories name Glpi-project as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-27914Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI
- CVE-2024-27104Stored XSS in dashboards in GLPI
- CVE-2024-27098Blind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI
- CVE-2024-27096SQL Injection in through the search engine
- CVE-2024-27930Sensitive fields access through dropdowns in GLPI
- CVE-2024-27937glpi Users emails enumeration
- CVE-2023-51446GLPI LDAP Injection during authentication
- CVE-2024-23645GLPI reflected XSS in reports pages
- CVE-2023-46727GLPI SQL injection through inventory agent request
- CVE-2023-46726GLPI Remote code execution from LDAP server configuration form on PHP 7.4
- CVE-2023-43813glpi Authenticated SQL Injection
- CVE-2023-42802GLPI vulnerable to unallowed PHP script execution
- CVE-2023-42462File deletion through document upload process in GLPI
- CVE-2023-42461SQL injection in ITIL actors in GLPI
- CVE-2023-41888Phishing through a login page malicious URL in GLPI
- CVE-2023-41326Account takeover via Kanban feature in GLPI
- CVE-2023-41324Account takeover through API in GLPI
- CVE-2023-41323Users login enumeration by unauthenticated user in GLPI
- CVE-2023-41322Privilege Escalation from technician to super-admin in GLPI
- CVE-2023-41321Sensitive fields enumeration through API in GLPI
- CVE-2023-41320Account takeover via SQL Injection in UI layout preferences in GLPI
- CVE-2023-37278GLPI vulnerable to SQL injection via dashboard administration
- CVE-2023-36808GLPI vulnerable to SQL injection through Computer Virtual Machine information
- CVE-2023-35940GLPI vulnerable to unauthenticated access to Dashboard data
- CVE-2023-35939GLPI vulnerable to unauthorized access to Dashboard data
- CVE-2023-35924GLPI vulnerable to SQL injection via inventory agent request
- CVE-2023-34244GLPI vulnerable to reflected XSS in search pages
- CVE-2023-34107GLPI vulnerable to unauthorized access to KnowbaseItem data
- CVE-2023-34106GLPI vulnerable to unauthorized access to User data
- CVE-2023-34254Remote inventory task command injection when using ssh command mode