CVE-2013-5696

inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote…

published September 23, 2013

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and (1) perform a SQL injection via an Etape_4 action or (2) execute arbitrary PHP code via an update_1 action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07855 · 94.6th percentile
Published
2013-09-23T01:00Z
EPSS history
Timeline
  • 23 SEP 01:00Z
    inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote…
    cvelistv5