cve/2016/CVE-2016-7508.md

CVE-2016-7508

Description

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

POC

Reference

• https://github.com/glpi-project/glpi/issues/1047
• https://github.com/glpi-project/glpi/issues/1047
• https://www.exploit-db.com/exploits/42262/
• https://www.exploit-db.com/exploits/42262/

Github

• https://github.com/ARPSyndicate/cvemon