CVE-2019-10232

Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-03-27

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Gestionnaire Libre De Parc Informatique (Teclib-edition)

References

• https://github.com/glpi-project/glpi/commit/684d4fc423652ec7dde21cac4d41c2df53f56b3c