4 matches found
CVE-2026-76176
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...
EUVD-2026-70371
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...
CVE-2026-76176 Multiple vulnerabilities in Ocsreports for OCS Inventory NG
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...
CVE-2026-76176
CVE-2026-76176 is a SQL injection vulnerability in Ocsreports for OCS Inventory NG , located in the endpoint /ocsreports/index.php?function=admin_double. The root cause is improper processing of values in the ID field of the selected_grp_dupli[] parameter. An authenticated user with operator priv...