Glpi-Project: >> Glpi >> 9.2.4 Security Vulnerabilities
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
CVSS Score
8.1
EPSS Score
0.004
Published
2019-03-27
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.
CVSS Score
8.8
EPSS Score
0.003
Published
2018-07-02
Page 11