CVE-2017-11184

SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.

• CWE-89

• https://github.com/glpi-project/glpi/issues/2449Third Party Advisory
• https://github.com/glpi-project/glpi/releases/tag/9.1.5Third Party Advisory
• https://github.com/glpi-project/glpi/issues/2449Third Party Advisory
• https://github.com/glpi-project/glpi/releases/tag/9.1.5Third Party Advisory

Published

Jul 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11179FineCMS through 2017-07-11 has stored XSS in route=admin whe…
• CVE-2017-1118IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow …
• CVE-2017-11180FineCMS through 2017-07-11 has stored XSS in the logging fun…
• CVE-2017-11181In Rise Ultimate Project Manager v1.8, XSS vulnerabilities w…
• CVE-2017-11182In Rise Ultimate Project Manager v1.8, XSS vulnerabilities w…
• CVE-2017-11183front/backup.php in GLPI before 9.1.5 allows remote authenti…
• CVE-2017-11185The gmp plugin in strongSwan before 5.6.0 allows remote atta…7.5
• CVE-2017-11187phpMyFAQ before 2.9.8 does not properly mitigate brute-force…
• CVE-2017-11188The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0…
• CVE-2017-11189unrarlib.c in unrar-free 0.0.1 might allow remote attackers …6.5
• CVE-2017-1119IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow …4.3
• CVE-2017-11190unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enab…