CVE-2017-11184: GLPI-Project GLPI

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.

Affected products

• GLPI-Project GLPI: up to and including 9.1.4

Published 2017-07-28. Last modified 2026-06-17.