Back to the CVE list
CVE-2022-35914 CISA KEV · Actively exploited

Teclib GLPI Remote Code Execution Vulnerability

CVSS score

—

EPSS probability

%99.9

Risk score

—

Published

3 y ago

OverviewPublic Exploits (10)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
hughink/CVE-2022-35914-GLPI-
GitHub

批量poc脚本 (★0)

Public PoCSource updated: 03.10.2022 21:13:36
G
Gabriel-Lima232/CVE-2022-35914
GitHub

Unauthenticated RCE in GLPI 10.0.2 (★0)

Public PoCSource updated: 06.11.2022 15:23:14
G
Johnermac/CVE-2022-35914
GitHub

Script in Ruby for the CVE-2022-35914 - RCE in GLPI (★0)

Public PoCSource updated: 18.07.2023 09:58:55
G
allendemoura/CVE-2022-35914
GitHub

PoC exploit for GLPI - Command injection using a third-party library script (★0)

Public PoCSource updated: 24.04.2024 18:21:55
G
0romos/CVE-2022-35914
GitHub

𓃌 - htmlLawed 1.2.5 Remote code Execution (★0)

Public PoCSource updated: 30.05.2024 04:58:46
G
noxlumens/CVE-2022-35914_poc
GitHub

Modified for GLPI Offsec Lab: call_user_func, array_map, passthru (★0)

Public PoCSource updated: 26.08.2024 04:34:26
G
YumeSecurity/CVE-2022-35914
GitHub

my exploit for GLPI (★0)

Public PoCSource updated: 22.07.2026 06:12:23
G
cyb3rk0ala/CVE-2022-35914-RCE
GitHub

PoC exploit for CVE-2022-35914 — GLPI htmLawed command injection, command execution, and reverse shell support. (★0)

Public PoCSource updated: 12.08.2026 00:48:33
E
htmlLawed 1.2.5 - Remote Code Execution (RCE)
Exploit-DB

htmlLawed 1.2.5 - Remote Code Execution (RCE)

Exploit referenceSource updated: 19.05.2024 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35914.yaml
Nuclei

Nuclei: GLPI <=10.0.2 - Remote Command Execution

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-35914"