CVE-2016-7508

CVE-2016-7508 describes multiple SQL injection vulnerabilities in GLPI version 0.90.4. An authenticated attacker can execute arbitrary SQL commands by leveraging specific character usage when the database is configured with Big5 Asian encoding. This vulnerability carries a high CVSS score of 7.5, indicating a significant risk with high impact on confidentiality, integrity, and availability, despite requiring authenticated access and higher attack complexity. While not listed on the KEV catalog or Hot List, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.