glpi.

GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feeds

• glpi
• Broken access control

GLPI: Blind Time based SQLI in dropdowns

• glpi
• SQL injection

GLPI: MFA bypass

• glpi
• Authentication bypass

GLPI: Unallowed notifications sending

• glpi
• Broken access control

GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning

• GLPI
• Privilege escalation

GLPI through 12.0.0 Missing Authorization via ajax/map.php

• GLPI
• Broken access control

GLPI: SQL injection in history tab

• glpi
• SQL injection

GLPI: Arbitrary Document Read via Form Context Authorization Bypass

• glpi
• Broken access control

GLPI: RCE via Form import

• glpi
• Path traversal

GLPI: Privilege Escalation via authtype API manipulation

• glpi
• Broken access control

GLPI: Reflected XSS in dashboards

• glpi
• Cross-site scripting (XSS)

GLPI: arbitrary file deletion

• glpi
• Path traversal

GLPI: Stored XSS in suppliers

• glpi
• CWE-116

GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Force

• glpi
• Authentication bypass

GLPI: Unallowed modfication of knowbase items comments and translations

• glpi
• Broken access control

GLPI: Unallowed authentication method update by administrator

• glpi
• Broken access control

GLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation)

• glpi
• Privilege escalation

GLPI: Unexpected access to update operations through the API

• glpi
• Broken access control

GLPI: LDAP filter injection in user import feature

• glpi
• Other injection

glpi-project glpi Document document.send.php canViewFile authorization

• glpi
• Broken access control

GLPI has stored XSS in asset locks

• glpi
• Cross-site scripting (XSS)
• CWE-116

GLPI vulnerable to arbitrary file access

• glpi
• Broken access control

GLPI Vulnerable to Arbitrary Item Deletion via Planning Endpoint

• glpi
• Broken access control

GLPI vulnerable to arbitrary files deletion by technician

• glpi
• Broken access control

GLPI vulnerable to unauthorized reading of a specific asset object

• glpi
• Broken access control

GLPI Vulnerable to Stored XSS in ITIL Costs

• glpi
• Cross-site scripting (XSS)

GLPI 11.0.0 - Stored XSS in knowledge base

• glpi
• Cross-site scripting (XSS)

GLPI: Unauthorized export of form structure

• glpi
• Broken access control

GLPI has an Authenticated SQL Injection via log exports

• glpi
• SQL injection

GLPI has an Unauthenticated SQL Injection via Search engine

• glpi
• SQL injection

GLPI has an Unauthenticated Stored XSS via inventory

• glpi
• Cross-site scripting (XSS)
• Authentication bypass

GLPI has a Server-Side Template Injection via Double-Compilation

• glpi
• Code injection

GLPI has Stored XSS in Supplier 'Website' field

• glpi
• Cross-site scripting (XSS)
• CWE-116

GLPI has a MFA bypass

• glpi
• Authentication bypass

GLPI Vulnerable to Authenticated SQL Injection

• glpi
• SQL injection

GLPI affected by Remote Code Execution via malicious upload

• glpi
• Insecure deserialization

GLPI is Vulnerable to Authenticated SQL Injection

• glpi
• SQL injection

GLPI is vulnerable to session stealing on externally authenticated user change

• glpi
• Authentication bypass

GLPI is Vulnerable to SSRF via Webhooks

• glpi
• Server-side request forgery (SSRF)

GLPI has an unauthenticated SQL injection through the inventory endpoint

• glpi
• SQL injection

GLPI incorrectly authorizes access to documents

• glpi
• Broken access control

GLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint

• GLPI
• Information disclosure

GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the API

• glpi
• Broken access control

GLPI Vulnerable to Unauthenticated Stored XSS on the Inventory page

• glpi
• Cross-site scripting (XSS)

GLPI permits unauthorized rules execution order

• glpi
• Privilege escalation

GLPI permits reservation modification by unauthorized users

• glpi
• Broken access control

GLPI technicians can access unauthorized information through external links

• glpi
• Broken access control

GLPI's incomprehensive permission checks can lead to data removal from allowed users

• glpi
• Broken access control

GLPI exposes data to non-allowed users

• glpi
• Broken access control

GLPI's MailCollector Receiver is vulnerable to credential exfiltration

• glpi
• Hard-coded credentials

GLPI is vulnerable to XSS and open redirection attacks through planning feature

• glpi
• Cross-site scripting (XSS)
• Open redirect

GLPI has overly permissive URL verification

• glpi
• Server-side request forgery (SSRF)

GLPI is susceptible to Stored XSS attack through project's kanban

• glpi
• Cross-site scripting (XSS)

GLPI allows authenticated remote code execution

• glpi
• Unrestricted file upload

GLPI allows unauthenticated SQL injection through the inventory endpoint

• glpi
• SQL injection

GLPI allows SQL injection through the rules configuration

• glpi
• SQL injection

GLPI allows unauthorized access to debug mode

• glpi
• Information disclosure

GLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin

• glpi
• Authentication bypass

GLPI: Plugins are disabled accessing one page

• glpi
• Broken access control

GLPI Cross-site Scripting vulnerability

• glpi
• Cross-site scripting (XSS)