writeups.xyz / From a GLPI patch bypass to RCE

Submitter : c2a

Date: 20 June 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• SQL Injection
• LFI
• Security Code Review

Programs :

• GLPI

Authors :

• Guilhem Rioux (@GuilhemRioux)

Link :
https://sensepost.com/blog/2024/from-a-glpi-patch-bypass-to-rce/