CVE-2017-11474

Critical

Published: 20/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to upgrade GLPI to version 9.1.5.1 or later to mitigate this vulnerability.

Original NVD description (English source)

GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.