GLPI mreporting Plugin SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the GLPI mreporting plugin, affecting versions through 1.9.3. The issue arises from improper handling of user input related to date changes, allowing for malicious SQL queries to be executed. This vulnerability has been addressed in version 1.9.4.
Impact
Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.
Remediation
Users can upgrade to GLPI mreporting version 1.9.4 to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.