OCS Inventory NG - Multiple SQL Injections (May 30 2009)
Open Computer and Software (OCS) Inventory NG (http://www.ocsinventory-ng.org/)
OCS Inventory NG 1.02 (Unix)
Vendor has been notified and the vulnerability has been fixed.
The Open Computer and Software (OCS) Inventory Next Generation (NG) provides relevant inventory information about system configurations and software on the network. The server can be managed using a web interface. It was found that the application does not properly sanitize user input which results into multiple SQL injections.
Affected are the following scripts:
group_show.php (parameter `SYSTEMID');
Attackers may be able to manipulate SQL statements in such a way that they can retrieve, create or modify information stored in the database. Furthermore, the SQL injection might allow attackers to get a foothold on the underlying system.
The vulnerability can be exploited by just using a web browser:
http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml Nico Leidecker - http://www.leidecker.info