EIP-2026-107435

The advisory describes a SQL injection vulnerability in GLPI versions 0.90.2 and prior, exploitable via the 'page_limit' parameter in '/ajax/getDropdownConnect.php'. The provided URL demonstrates a time-based SQL injection technique to verify MySQL version.