Filter
AND
Teclib GLPIGLPI has a stored XSS via document upload
6.7
First published (updated )
Teclib GLPIGLPI allows Authenticated File Upload to Restricted Tickets
4.3
First published (updated )
Teclib GLPISensitive fields access through dropdowns in GLPI
6.5
EPSS
0.04%
First published (updated )
Teclib GLPIStored XSS in dashboards in GLPI
4.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Teclib GLPIReflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI
6.1
EPSS
0.04%
First published (updated )
Teclib GLPIGLPI has a Reflected XSS in /front/stat.graph.php
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Teclib GLPIGLPI has a reflected XSS in ajax/cable.php
6.5
First published (updated )
Teclib GLPIGLPI has a stored XSS at src/RSSFeed.php
5.7
First published (updated )
Teclib GLPIGLPI vulnerable to unauthorized access to User data
6.5
First published (updated )
Teclib GLPIGLPI vulnerable to unauthorized access to KnowbaseItem data
6.5
First published (updated )
Teclib GLPIGLPI vulnerable to reflected XSS in search pages
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Teclib GLPISensitive fields enumeration through API in GLPI
6.5
First published (updated )
Teclib GLPIUsers login enumeration by unauthenticated user in GLPI
5.3
First published (updated )
Teclib GLPIPhishing through a login page malicious URL in GLPI
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Teclib GLPIinc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP…
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Teclib GLPIGLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attack…
First published (updated )
Teclib GLPIGLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging pe…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.