VDB
GCVE-110-MAGEIA-2015-17
GCVE-110-MAGEIA-2015-17
Advisory Published
Updated glpi package fixes security vulnerabilities:
Due to a bug in GLPI before 0.84.7, a user without access to cost information
can in fact see the information when selecting cost as a search criteria
(CVE-2014-5032).
An issue in GLPI before 0.84.8 may allow arbitrary local files to be included
by PHP through an autoload function (CVE-2014-8360).
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1
allows remote authenticated users to execute arbitrary SQL commands via the
condition parameter (CVE-2014-9258).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | glpi | 0 (affected), 0.84.3-1.2.mga4 (unaffected) | — |
References
Browse GCVE Records
6,043 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.