of GLPI, in order to read or alter data. Impacted products: Fedora. Severity: 2/4. Creation date: 22/04/2016. DESCRIPTION OF THE VULNERABILITY The GLPI product uses a database. However, user’s data ...
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter.