CVE-2018-13049

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-13049

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13049.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-13049

Related

MGASA-2018-0330

Published

2018-07-02T11:29:00.227Z

Modified

2026-02-04T02:13:53.183752Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.

References

https://github.com/glpi-project/glpi/issues/4270

Affected packages

Git / github.com/glpi-project/glpi

Affected ranges

Type: GIT
Repo: https://github.com/glpi-project/glpi
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

d5017d7de5636bfe5a2f13e64c685423723f7f33

Affected versions

0.*

0.90

0.90-RC1

0.90-RC2

0.90-beta1

0.90-beta2

0.90.1

9.*

9.1

9.1-RC1

9.1-RC2

9.3-RC1

9.3-RC2

9.3-beta

9.3.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-13049.json"