OCS Inventory NG 1.02 - Multiple SQL Injections

OCS Inventory NG 1.02 - Multiple SQL Injections OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability ha...

OCS Inventory NG 1.02 - Multiple SQL Injections

OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been fixed. Details The Open Computer and...

OCS Inventory NG 1.02 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ OCS Inventory NG 1.02 Multiple SQL Injection Vulnerabilities ============================================================ OCS Inventory NG - Multiple SQL Injections May 30 2009...

OCS Inventory NG 1.02 - Multiple SQL Injections

OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been fixed. Details The Open Computer and...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

Open redirect

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

CVE-2009-1769 affects OCS Inventory NG (notably around 1.01-era interfaces) where the web UI may disclose valid usernames via differing error messages. OpenVAS/Nessus records tie this to Fedora advisories FEDORA-2009-5764/5769/5773 for ocsinventory, noting additional mentions of SQL injection and...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

DEBIAN-CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

OCS Inventory NG is affected in versions before 1.02, with multiple unspecified vulnerabilities in the Server component. The available sources note unknown impact and attack vectors, and there are no explicit root-cause or patch details in the provided connected documents. No exploitation informa...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

Code injection

Unspecified vulnerability in Microsoft Office Communications Server OCS, Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service crash via a crafted Real-time Transport Control Protocol RTCP receiver report packet...

CVE-2008-5179

The CVE-2008-5179 entry describes an unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger that enables remote attackers to trigger a denial-of-service (crash) by sending a crafted RTCP receiver report packet. The vulnerability ...