Ocs Inventory Ng@1.02.1 Security Vulnerabilities and Issues — Ocs Inventory Ng@1.02.1 CVE List

Lucene search

Ocsinventory-ngOcs Inventory Ng1.02.1

4 matches found

CVE•added 2011/10/21 6:55 p.m.•52 views

CVE-2011-4024

Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.5AI score0.1558EPSS

CVE•added 2010/04/28 11:30 p.m.•48 views

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val_1, or (3) onglet_bis parameter.

7.5CVSS8.6AI score0.00465EPSS

CVE•added 2010/04/28 11:30 p.m.•46 views

CVE-2010-1594

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third part...

4.3CVSS5.7AI score0.00329EPSS

CVE•added 2009/09/01 6:30 p.m.•38 views

CVE-2009-3042

SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.

7.5CVSS8.4AI score0.00931EPSS