漏洞描述
TeclibGLPI是法国Teclib公司的一套开源的IT资产管理套件。该套件包含设备状态管理、资产清单存储、管理流程和工作日志管理等功能。9.3.3版本之前在scripts/unlock_tasks.php存在SQL注入漏洞。
Teclib GLPI 9.3.3版本之前存在SQL注入漏洞(CVE-2019-10232)
PoC代码
暂无相关漏洞推荐
- POC CVE-2019-10232: Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection
- POC CVE-2020-11034: GLPI <9.4.6 - Open Redirect
- POC CVE-2021-39211: GLPI 9.2/<9.5.6 - Information Disclosure
- POC CVE-2021-43778: GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.
- POC CVE-2022-35914: GLPI <=10.0.2 - Remote Command Execution
- POC CVE-2024-29889: GLPI 10.0.10-10.0.14 - SQL Injection
- POC CVE-2025-24799: GLPI < 10.0.17 - Pre-Auth SQL Injection
- POC glpi-default-login: GLPI Default Login
- POC glpi-directory-listing: GLPI Directory Listing
- POC glpi-installer: GLPI Installation Page - Exposure
- GLPI 未授权SQL注入漏洞
- GLPI 存在SQL注入漏洞（CVE-2025-24799）
- GLPI 跨站脚本漏洞