GLPI Inventory Plugin
Moderate fix1 remedy
cpe:2.3:a:glpi-project:glpi_inventory:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 1.5.0
GLPI Inventory Plugin SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in the GLPI Inventory Plugin, specifically in versions through 1.5.0. This vulnerability allows for unauthenticated SQL injection, posing a high risk to users.
Impact
Exploitation of this vulnerability allows for unauthenticated SQL injection, which could lead to unauthorized data access or manipulation within the application's database.
Remediation
Users are advised to upgrade to GLPI Inventory Plugin version 1.5.1, which addresses the SQL injection vulnerability. The updated version can be downloaded from the GLPI Inventory Plugin GitHub Releases page.
Added: Nov 4, 2025, 9:25 PM
Updated: Nov 4, 2025, 9:25 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
2.5exploitability
7.8remediation
7.7relevance
0.9threat
0.0urgency
2.9incentive
10.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.