Vulnerabilities > Glpi Project > Glpi > 9.5.1

DATE CVE VULNERABILITY TITLE RISK
2020-10-07 CVE-2020-15176 Unspecified vulnerability in Glpi-Project Glpi
In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur.
network
low complexity
glpi-project
8.6
8.6
2020-10-07 CVE-2020-15175 Unspecified vulnerability in Glpi-Project Glpi
In GLPI before version 9.5.2, the `?pluginimage.send.php?` endpoint allows a user to specify an image from a plugin.
network
low complexity
glpi-project
critical
 9.1
9.1