VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jul 12, 2012· Updated Apr 29, 2026

CVE-2012-1037

CVE-2012-1037

Description

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter.

Affected products

14
  • Glpi Project/Glpi14 versions
    cpe:2.3:a:glpi-project:glpi:0.78:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:glpi-project:glpi:0.78:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.78.1:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.78.2:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.78.3:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.78.4:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.78.5:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.1:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.2:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.3:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.4:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.5:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.6:*:*:*:*:*:*:*
    • cpe:2.3:a:glpi-project:glpi:0.80.61:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.