Skip to content
OpenAdvisories

Vendor

cconard96

1 known vulnerabilities.

Products

glpi-screenshot-plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2025-54780

    glpi-screenshot-plugin exposes local files in /ajax/screenshot.php

    The glpi-screenshot-plugin allows users to take screenshots or screens recording directly from GLPI. In versions below 2.0.2, authenticated user can use the /ajax/screenshot.php endpoint to leak files from the system or use PHP wrappers. This is fixed in vers…

    cconard96 glpi-screenshot-plugin