Lucene search

PRIOn knowledge basePRION:CVE-2010-1733

HistoryMay 06, 2010 - 12:47 p.m.

Sql injection

2010-05-0612:47:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.9%

JSON

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the “Software name” field to the “All softwares” search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
ocs_inventory_ngeq1.02
ocs_inventory_ngeq1.0 beta
ocs_inventory_ngeq1.01
ocs_inventory_ngeq1.0
ocs_inventory_ngeq1.2 unix
ocs_inventory_ngeq1.2 rc2
ocs_inventory_ngeq1.2 rc1
ocs_inventory_ngeq1.0 rc1
ocs_inventory_ngeq1.2 rc3
ocs_inventory_ngeq1.0 rc3

Name	Operator	Version
ocs_inventory_ng	eq	1.02
ocs_inventory_ng	eq	1.0 beta
ocs_inventory_ng	eq	1.01
ocs_inventory_ng	eq	1.0
ocs_inventory_ng	eq	1.2 unix
ocs_inventory_ng	eq	1.2 rc2
ocs_inventory_ng	eq	1.2 rc1
ocs_inventory_ng	eq	1.0 rc1
ocs_inventory_ng	eq	1.2 rc3
ocs_inventory_ng	eq	1.0 rc3

Rows per page:

1-10 of 121

References

osvdb.org/61942

secunia.com/advisories/38311

www.mandriva.com/security/advisories?name=MDVSA-2010:178

exchange.xforce.ibmcloud.com/vulnerabilities/55873

8.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.9%

JSON

Related for PRION:CVE-2010-1733