CVE-2017-11474: SQL Injection
Published Jul 20, 2017
·Updated
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computersoftwareversion.class.php, exploitable via ajax/common.tabs.php.
Affected Software
1 affected component
GLPI-PROJECT GLPI<=9.1.5.0
Remediation
Patch Available
Event History
Jul 20, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11474?
CVE-2017-11474 is classified as a medium severity vulnerability due to its SQL injection risk.
2
How do I fix CVE-2017-11474?
To fix CVE-2017-11474, update GLPI to version 9.1.5.1 or later.
3
What does CVE-2017-11474 affect?
CVE-2017-11474 affects GLPI versions prior to 9.1.5.1, specifically in the inc/computer_softwareversion.class.php file.
4
How can CVE-2017-11474 be exploited?
CVE-2017-11474 can be exploited via the ajax/common.tabs.php endpoint by manipulating the $crit variable.
5
Is CVE-2017-11474 a known vulnerability?
Yes, CVE-2017-11474 is a recognized vulnerability affecting GLPI, documented in various security databases.