Description
GLPI中存在SQL注入漏洞，该漏洞是由于未正确验证SQL查询中使用的清单代理请求中的用户数据造成的。
GLPI-Project GLPI Inventory Agent CVE-2023-46727 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-46727
https://github.com/glpi-project/glpi/security/advisories/GHSA-v799-2mp3-wgfr
https://cvefeed.io/vuln/detail/CVE-2023-46727
https://avd.aquasec.com/nvd/2023/cve-2023-46727/
https://www.glpi-project.org/en/glpi-10-0-11-is-available/
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:SQL:INJ:GLPI-PROJECT-INVEN.html
https://cve.imfht.com/detail/CVE-2023-46727