CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-06-21

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Glpi (Glpi-project)

References

• https://github.com/glpi-project/glpi/issues/1047
• https://www.exploit-db.com/exploits/42262/