Поиск уязвимостей
Количество 5
Количество 5
CVE-2014-8360
Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php.
CVE-2014-8360
Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php.
CVE-2014-8360
Directory traversal vulnerability in inc/autoload.function.php in GLPI ...
GHSA-6672-57h5-f9rw
Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php.
ALT-PU-2014-2285
ALT-PU-2014-2285: package `glpi` update to version 0.84.8-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-8360 Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php. | CVSS2: 7.5 | 3% Низкий | больше 11 лет назад |
 | CVE-2014-8360 Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php. | CVSS2: 7.5 | 3% Низкий | больше 11 лет назад |
| CVE-2014-8360 Directory traversal vulnerability in inc/autoload.function.php in GLPI ... | CVSS2: 7.5 | 3% Низкий | больше 11 лет назад |
| GHSA-6672-57h5-f9rw Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore) in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php. | 3% Низкий | больше 4 лет назад | |
| ALT-PU-2014-2285 ALT-PU-2014-2285: package `glpi` update to version 0.84.8-alt1 | CVSS2: 7.5 | 3% Низкий | около 12 лет назад |
Уязвимостей на страницу