CVE-2013-5696
GLPI < 0.84.2 - Cross-Site Request Forgery and SQL Injection via Install Script
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-5696.
PoCs published by High-Tech Bridge SA, Metasploit, including Metasploit module exploits/multi/http/glpi_install_rce.
AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in GLPI 0.84.1: improper access control allowing database host manipulation and arbitrary PHP code injection via insufficient input validation in the installation script. Both exploits use HTTP POST requests to modify configuration files.
Description
inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and (1) perform a SQL injection via an Etape_4 action or (2) execute arbitrary PHP code via an update_1 action.
Exploits (3)
The exploit demonstrates two vulnerabilities in GLPI 0.84.1: improper access control allowing database host manipulation and arbitrary PHP code injection via insufficient input validation in the installation script. Both exploits use HTTP POST requests to modify configuration files.
This Metasploit module exploits a command injection vulnerability in GLPI's install.php script by injecting PHP code into the database configuration, which is then executed via a crafted GET request.
This Metasploit module exploits a command injection vulnerability in GLPI's install.php script by injecting malicious PHP code into the database configuration, which is then executed via a crafted GET request.