Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-9258
6.5
MEDIUMCVSS v2
Published
December 19, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.<= 0.85NVD