← All advisories

Critical severity9.8OSV Advisory· Published Mar 27, 2019· Updated Jun 17, 2026

CVE-2019-10232

CVE-2019-10232

Description

Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Glpi Project/GlpiOSV2 versions
0.90, 0.90-RC1, 0.90-RC2, …+ 1 more
- (no CPE)range: 0.90, 0.90-RC1, 0.90-RC2, …
- (no CPE)range: <=9.3.3
Teclib Edition/Gestionnaire Libre De Parc Informatique
cpe:2.3:a:teclib-edition:gestionnaire_libre_de_parc_informatique:*:*:*:*:*:*:*:*
Range: <=9.3.3
Teclib/GLPIllm-create
Range: <=9.3.3

Patches

Vulnerability mechanics

References

1

github.com/glpi-project/glpi/commit/684d4fc423652ec7dde21cac4d41c2df53f56b3cnvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.