**Name of the Vulnerable Software and Affected Versions:**

GLPI versions prior to 10.0.18

**Description:**

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the `/inventory` endpoint. The vulnerability is due to improper neutralization of special elements used in SQL queries.

**Recommendations:**

GLPI versions prior to 10.0.18: Upgrade to version 10.0.18 or later to resolve this issue.