CVEDB API

The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data to front/upload.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.095

EPSS Ranking 92.4%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2022-34128

Glpi-Project » Positions » Version: 4.1.0

cpe:2.3:a:glpi-project:positions:4.1.0
Glpi-Project » Positions » Version: 4.2.0

cpe:2.3:a:glpi-project:positions:4.2.0
Glpi-Project » Positions » Version: 4.2.1

cpe:2.3:a:glpi-project:positions:4.2.1
Glpi-Project » Positions » Version: 4.3.0

cpe:2.3:a:glpi-project:positions:4.3.0
Glpi-Project » Positions » Version: 4.3.1

cpe:2.3:a:glpi-project:positions:4.3.1
Glpi-Project » Positions » Version: 4.4.0

cpe:2.3:a:glpi-project:positions:4.4.0
Glpi-Project » Positions » Version: 4.5.0

cpe:2.3:a:glpi-project:positions:4.5.0
Glpi-Project » Positions » Version: 4.5.1

cpe:2.3:a:glpi-project:positions:4.5.1
Glpi-Project » Positions » Version: 4.5.2

cpe:2.3:a:glpi-project:positions:4.5.2
Glpi-Project » Positions » Version: 4.6.0

cpe:2.3:a:glpi-project:positions:4.6.0
Glpi-Project » Positions » Version: 5.0.0

cpe:2.3:a:glpi-project:positions:5.0.0
Glpi-Project » Positions » Version: 6.0.0

cpe:2.3:a:glpi-project:positions:6.0.0