GLPI Inventory Plugin
Moderate fix1 remedy
cpe:2.3:a:glpi-project:glpi_inventory:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 1.6.5
GLPI Inventory Plugin SQL Injection Vulnerability in Reports
Vulnerability
Patched
A SQL injection vulnerability has been identified in the GLPI Inventory Plugin, specifically in versions through 1.6.5. The issue arises from the handling of non-sanitized user input in reports, which can be exploited by users with the appropriate rights. This vulnerability has been addressed in version 1.6.6.
Impact
Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries and potentially access or modify sensitive data.
Remediation
Users can upgrade to GLPI Inventory Plugin version 1.6.6 to address this vulnerability.
Added: Mar 18, 2026, 12:46 AM
Updated: Mar 18, 2026, 12:46 AM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
3.1exploitability
4.9remediation
7.7relevance
4.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.