CVE-2017-11183

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.

• CWE-20

• https://github.com/glpi-project/glpi/issues/2450Third Party Advisory
• https://github.com/glpi-project/glpi/releases/tag/9.1.5Third Party Advisory
• https://github.com/glpi-project/glpi/issues/2450Third Party Advisory
• https://github.com/glpi-project/glpi/releases/tag/9.1.5Third Party Advisory

Published

Jul 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11178In FineCMS through 2017-07-11, application/core/controller/s…
• CVE-2017-11179FineCMS through 2017-07-11 has stored XSS in route=admin whe…
• CVE-2017-1118IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow …
• CVE-2017-11180FineCMS through 2017-07-11 has stored XSS in the logging fun…
• CVE-2017-11181In Rise Ultimate Project Manager v1.8, XSS vulnerabilities w…
• CVE-2017-11182In Rise Ultimate Project Manager v1.8, XSS vulnerabilities w…
• CVE-2017-11184SQL injection exists in front/devicesoundcard.php in GLPI be…
• CVE-2017-11185The gmp plugin in strongSwan before 5.6.0 allows remote atta…7.5
• CVE-2017-11187phpMyFAQ before 2.9.8 does not properly mitigate brute-force…
• CVE-2017-11188The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0…
• CVE-2017-11189unrarlib.c in unrar-free 0.0.1 might allow remote attackers …6.5
• CVE-2017-1119IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow …4.3