CVE-2013-2226
GLPI < 0.83.9 - SQL Injection via users_id_assign, filename, or table Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-2226.
AI-analyzed exploit summary This is a detailed technical writeup of CVE-2013-2226, which describes multiple error-based SQL injection vulnerabilities in GLPI v0.83.8. The analysis includes vulnerable code snippets, SQL error messages, and HTTP request examples demonstrating the exploitation vectors.
Description
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) table parameter to ajax/comments.php.
Exploits (1)
This is a detailed technical writeup of CVE-2013-2226, which describes multiple error-based SQL injection vulnerabilities in GLPI v0.83.8. The analysis includes vulnerable code snippets, SQL error messages, and HTTP request examples demonstrating the exploitation vectors.