Back to search
CVE-2015-7684
Published: Oct 5, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20150217 [CVE-REQUEST] Multiple vulnerabilities on GLPI
mailing-list
x_refsource_FULLDISC
http://www.glpi-project.org/spip.php?page=annonce&id_breve=338
x_refsource_CONFIRM
https://forge.glpi-project.org/issues/5217
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now