CVEvulnerability
CVE-2013-2225
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Description
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php.
Affected configurations
• glpi-project glpi (<= 0.83.9)
• glpi-project glpi 0.5
• glpi-project glpi 0.6
• glpi-project glpi 0.20
• glpi-project glpi 0.21
• glpi-project glpi 0.30
• glpi-project glpi 0.31
• glpi-project glpi 0.40
• glpi-project glpi 0.41
• glpi-project glpi 0.42
• glpi-project glpi 0.51
• glpi-project glpi 0.51a
• glpi-project glpi 0.65
• glpi-project glpi 0.68
• glpi-project glpi 0.68.1
• glpi-project glpi 0.68.2
• glpi-project glpi 0.68.3
• glpi-project glpi 0.70
• glpi-project glpi 0.70.1
• glpi-project glpi 0.70.2
• glpi-project glpi 0.71
• glpi-project glpi 0.71.1
• glpi-project glpi 0.71.2
• glpi-project glpi 0.71.3
• glpi-project glpi 0.71.4
• glpi-project glpi 0.71.5
• glpi-project glpi 0.71.6
• glpi-project glpi 0.72
• glpi-project glpi 0.72.1
• glpi-project glpi 0.72.2
• glpi-project glpi 0.72.3
• glpi-project glpi 0.72.4
• glpi-project glpi 0.78
• glpi-project glpi 0.78.1
• glpi-project glpi 0.78.2
• glpi-project glpi 0.78.3
• glpi-project glpi 0.78.4
• glpi-project glpi 0.78.5
• glpi-project glpi 0.80
• glpi-project glpi 0.80.1
• glpi-project glpi 0.80.2
• glpi-project glpi 0.80.3
• glpi-project glpi 0.80.4
• glpi-project glpi 0.80.5
• glpi-project glpi 0.80.6
• glpi-project glpi 0.80.7
• glpi-project glpi 0.80.61
• glpi-project glpi 0.83
• glpi-project glpi 0.83.1
• glpi-project glpi 0.83.2
• glpi-project glpi 0.83.3
• glpi-project glpi 0.83.4
• glpi-project glpi 0.83.5
• glpi-project glpi 0.83.6
• glpi-project glpi 0.83.7
• glpi-project glpi 0.83.8
• glpi-project glpi 0.83.31
References
- http://osvdb.org/94683 osvdb.org
- http://seclists.org/oss-sec/2013/q2/626 seclists.org
- http://seclists.org/oss-sec/2013/q2/645 seclists.org
- http://www.exploit-db.com/exploits/26530 Exploit
- http://www.securityfocus.com/bid/60823 www.securityfocus.com
- https://forge.indepnet.net/projects/glpi/repository/revisions/21169/diff Exploit, Patch
- http://osvdb.org/94683 osvdb.org
- http://seclists.org/oss-sec/2013/q2/626 seclists.org
- http://seclists.org/oss-sec/2013/q2/645 seclists.org
- http://www.exploit-db.com/exploits/26530 Exploit
- http://www.securityfocus.com/bid/60823 www.securityfocus.com
- https://forge.indepnet.net/projects/glpi/repository/revisions/21169/diff Exploit, Patch