A critical SQL injection vulnerability, tracked as CVE-2025-24799, has been identified in GLPI, a widely used open-source IT Service Management (ITSM) tool. The flaw, if exploited, enables remote, unauthenticated attackers to manipulate database queries, potentially leading to severe consequences such as data theft, tampering, or even remote code execution. CVE-2025-24799 is an SQL injection vulnerability that specifically […]

The post GLPI ITSM Tool Flaw Allows Attackers to Inject Malicious SQL Queries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Source: gbHackers
Source Link: https://gbhackers.com/glpi-itsm-tool-flaw/