GLPi-project GLPI any version

GLPI is vulnerable to XSS and open redirection attacks through planning feature

inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.

Cross site scripting (XSS) via registration API in GLPI

Stored XSS in budget type

glpi vulnerable to XSS on external links

glpi contains XSS Stored inside Standard Interface Help Link href attribute

glpi contains XSS in RSS Description Link

bypass of manageRedirect in GLPI

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.

An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.

Reflected XSS using reload button in GLPI

XSS on tabs

Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

GLPI vulnerable to reflected Cross-site Scripting in search pages

GLPI index.php redirect

Reflexive XSS in GLPI

An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address.

Blind Server-Side Request Forgery (SSRF) in GLPI

GLPI has a stored XSS at src/RSSFeed.php

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.

Cross Site Scripting in GLPI

Stored XSS on documents

XSS injection on ticket update

Cross-Site Scripting (XSS) through public RSS feed in GLPI

GLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feeds

Stored Cross-Site Scripting (XSS) in user information in GLPI

Phishing through a login page malicious URL in GLPI

GLPI is susceptible to Stored XSS attack through project's kanban

GLPI permits reservation modification by unauthorized users

Users login enumeration by unauthenticated user in GLPI

Disclosure of GLPI and server information in telemetry endpoint

User data exposure in GLPI

Sensitive Data Exposure on Refused Inventory Files in GLPI

Leak of sensitive information through login page error in GLPI

Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning

Stored Cross-Site Scripting (XSS) on login page in GLPI

GLPI: Unauthorized export of form structure

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.

GLPI before 0.84.7 does not properly restrict access to cost information, which allows remote attackers to obtain sensitive information via the cost criteria in the search bar.

SQL Injection in GLPI Search API