EDB-26366

PoC

GLPI 0.83.8 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor LiquidWormpublished 2013-06-21catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-2227US	high7.5	13.0% (96th)	Exploit	2019-11-01
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
CVE-2013-2226US	high7.5	2.69% (86th)	Exploit	2014-05-14
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninfo…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.