Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2019-10231

Disclosure Date: March 27, 2019 (last updated November 27, 2024)
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).
0
0
Attacker Value
Unknown

CVE-2019-10232

Disclosure Date: March 27, 2019 (last updated November 27, 2024)
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
0
0