Описание
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| glpi | removed | package |
Примечания
Only supported behind an authenticated HTTP zone
EPSS
Процентиль: 71%
0.01309
Низкий
Связанные уязвимости
CVSS3: 4.9
ubuntu
больше 9 лет назад
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
CVSS3: 4.9
nvd
больше 9 лет назад
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
CVSS3: 4.9
github
больше 4 лет назад
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
CVSS3: 9.8
altlinux
около 9 лет назад
ALT-PU-2017-2291: package `glpi` update to version 9.1.6-alt2
EPSS
Процентиль: 71%
0.01309
Низкий