GCVE-110-MAGEIA-2018-330

Advisory Published

Vulnetix · Advisory published August 10, 2018

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php (CVE-2018-13049).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	glpi	0 (affected), 9.1.6-2.2.mga6 (unaffected)	—

Aliases

CVE-2018-13049

References

Updated glpi packages fix security vulnerability

advisory

Updated glpi packages fix security vulnerability

issue

Updated glpi packages fix security vulnerability

issue

Browse GCVE Records

73,196 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON