漏洞描述
/vendor/htmlawed/htmlawed/htmLawedTest.php在GLPI到10.0.2的htmlawed模块中允许PHP代码注入
GLPI的 10.0.2版本htmLawedTest.php存在远程命令执行漏洞(CVE-2022-35914)
PoC代码
暂无相关漏洞推荐
- （CVE-2025-15010）腾达WH450 1.0.0.18 /goform/SafeUrlFilter栈缓冲区溢出漏洞
- POC CVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
- POC CVE-2023-3388: Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting
- （CVE-2025-56107）Ruijie RG-BCR RG-BCR600W OS命令注入漏洞
- POC CVE-2022-31101: Prestashop Blockwishlist 2.1.0 SQL Injection
- POC CVE-2023-3277: MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
- POC CVE-2025-10204: AC Smart II - Authentication Bypass
- POC CVE-2025-10210: ChanCMS <= 3.3.0 - SQL Injection
- POC CVE-2025-10211: ChanCMS <= 3.3.0 - Server-Side Request Forgery
- Wifi-soft UniBox /authentication/logout.php 命令执行漏洞 （CVE-2025-6102）
- (CVE-2025-10476) WP Fastest Cache插件权限验证漏洞
- GLPI /index.php/ajax/ SQL 注入漏洞（CVE-2025-24799）
- TVT 数码科技 NVMS-1000 / 文件读取漏洞