glpi -- remote attack via crafted POST requestentered 2012-02-10
no CVE referenced
CVE details
CVE-2011-2720
The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request.
- Score
- 5.0 medium
- Published
- 2011-08-05
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.