Vulnerabilities > Glpi Project > Glpi > 0.40

DATE CVE VULNERABILITY TITLE RISK
2012-10-09 CVE-2012-4002 Cross-Site Request Forgery (CSRF) vulnerability in Glpi-Project Glpi
Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. 		6.8
6.8
2011-08-05 CVE-2011-2720 Information Exposure vulnerability in Glpi-Project Glpi
The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.
network
low complexity
glpi-project CWE-200
5.0
5.0