Security Advisory

CVE-2013-5696

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-09-23 01:00:00

Last updated 2024-09-16 16:17:31

Assigner mitre

State PUBLISHED

Description

inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and (1) perform a SQL injection via an Etape_4 action or (2) execute arbitrary PHP code via an update_1 action.

← Browse all CVEs View on cve.org ↗