What’s Vulnerable › Vulnerabilities

CVE-2019-10232

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 22.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-27 · updated 2026-06-17
• Weakness: CWE-89

Description

Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.

Affected products

• Teclib-Edition Gestionnaire Libre De Parc Informatique: through 9.3.3

References

• https://github.com/glpi-project/glpi/commit/684d4fc423652ec7dde21cac4d41c2df53f56b3c
• https://github.com/glpi-project/glpi/commit/684d4fc423652ec7dde21cac4d41c2df53f56b3c

Get alerted when CVE-2019-10232 or the next vulnerability affects your stack