Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2012-1037

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter.

  • Published: Jul 12, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-1037
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
glpi-project / glpi 0.80.5 0.80.5.x
glpi-project / glpi 0.80.6 0.80.6.x
glpi-project / glpi 0.80.2 0.80.2.x
glpi-project / glpi 0.78.2 0.78.2.x
glpi-project / glpi 0.80.3 0.80.3.x
glpi-project / glpi 0.78.3 0.78.3.x
glpi-project / glpi 0.78.4 0.78.4.x
glpi-project / glpi 0.78.1 0.78.1.x
glpi-project / glpi 0.80.61 0.80.61.x
glpi-project / glpi 0.80.1 0.80.1.x
glpi-project / glpi 0.78.5 0.78.5.x
glpi-project / glpi 0.80 0.80.x
glpi-project / glpi 0.80.4 0.80.4.x
glpi-project / glpi 0.78 0.78.x