CVE-2018-13049: SQL Injection
Published Jul 2, 2018
·Updated
The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.
Affected Software
1 affected component
GLPI-PROJECT GLPI>=9.2.0<=9.3.0
Event History
Jul 2, 2018
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-13049?
CVE-2018-13049 is classified as a high severity vulnerability due to its potential for SQL Injection.
2
How do I fix CVE-2018-13049?
To fix CVE-2018-13049, upgrade GLPI to version 9.3.1 or later, which addresses the SQL Injection issue.
3
What versions of GLPI are affected by CVE-2018-13049?
CVE-2018-13049 affects GLPI versions 9.2.0 through 9.3.0.
4
What type of vulnerability is CVE-2018-13049?
CVE-2018-13049 is an SQL Injection vulnerability found in the constructSQL function of GLPI.
5
Where can I find more information about CVE-2018-13049?
Detailed information about CVE-2018-13049 can typically be found in security bulletins and issue trackers related to GLPI.