CVE-2010-1733

2010-05-0600:00:00

ubuntu.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.4%

JSON

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3
allow remote attackers to execute arbitrary SQL commands via (1) multiple
inventory fields to the search form, reachable through index.php; or (2)
the “Software name” field to the “All softwares” search form, reachable
through index.php. NOTE: the provenance of this information is unknown;
the details are obtained solely from third party information.