2019-03-27 16:23:10
mitre
PUBLISHED
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.