漏洞描述
GLPI (Gestion Libre de Parc Informatique) 是一个可视化的信息资源管理器软件。CVE-2022-35914中，攻击者可构造恶意请求，通过GLPI的第三方依赖执行任意代码，控制服务器。
GLPI htmLawedTest.php 远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2019-10232: Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection
- POC CVE-2020-11034: GLPI <9.4.6 - Open Redirect
- POC CVE-2021-39211: GLPI 9.2/<9.5.6 - Information Disclosure
- POC CVE-2021-43778: GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.
- POC CVE-2022-35914: GLPI <=10.0.2 - Remote Command Execution
- POC CVE-2024-29889: GLPI 10.0.10-10.0.14 - SQL Injection
- POC CVE-2025-24799: GLPI < 10.0.17 - Pre-Auth SQL Injection
- POC glpi-default-login: GLPI Default Login
- POC glpi-directory-listing: GLPI Directory Listing
- POC glpi-installer: GLPI Installation Page - Exposure
- GLPI 未授权SQL注入漏洞
- GLPI 存在SQL注入漏洞（CVE-2025-24799）
- GLPI 跨站脚本漏洞