CVE-2019-10232: SQL Injection
Published Mar 27, 2019
·Updated
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php.
Affected Software
1 affected component
Teclib-edition Gestionnaire Libre De Parc Informatique<=9.3.3
Remediation
Event History
Mar 27, 2019
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
Description
Frequently Asked Questions
1
What is CVE-2019-10232?
CVE-2019-10232 is a vulnerability in Teclib GLPI through version 9.3.3 that allows for SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
2
How severe is CVE-2019-10232?
CVE-2019-10232 has a severity rating of 9.8 (critical).
3
What software versions are affected by CVE-2019-10232?
Teclib GLPI versions up to 9.3.3 are affected by CVE-2019-10232.
4
How can I fix CVE-2019-10232?
Update Teclib GLPI to a version beyond 9.3.3, which contains a fix for this vulnerability.
5
What is the Common Weakness Enumeration (CWE) for CVE-2019-10232?
The CWE for CVE-2019-10232 is CWE-89, which refers to improper neutralization of special elements used in an SQL command ('SQL Injection').