CVE-2016-7508

—

CVSS 3.0

7.5 high

EPSS

2%p74

Published

Jun 21, 2017 (Jun 21, 2017)

Modified

Jun 17, 2026

Description

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.

Vendors: glpi-project
Products: glpi
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.