Unauthenticated SQL injection in GLPI (≤ 11.0.8) https://mobeta.fr/blog/glpi-unauth-sqli/
MobetaUnauthenticated SQL injection in GLPI (≤ 11.0.8) | MobetaAn unauthenticated attacker can read the whole GLPI database via the planning endpoint (GLPI ≤ 11.0.8). Analysis, proof of concept and the 11.0.9 fix.