EDB-26530
PoCGLPI 0.83.9 - 'Unserialize()' Remote Code Execution
view exploit source exploit_dbtype webappsauthor Xavier Mehrenbergerpublished 2013-07-01catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-2225US | medium6.4 | Exploit | ||
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan