Teclib GLPI Remote Code Execution Vulnerability

This strike exploits a code injection vulnerability in GLPI. The vulnerability is due to improper validation of user configuration data sent to the endpoint htmLawedTest.php. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could result in arbitrary code execution in the security context of the web server process. *NOTE: While running this strike in OneArm mode, a file /tmp/poc is created on the server.