CVE Feed

    Dashboard / CVE / CVE-2009-2166

    CVE-2009-2166

    Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter.

    Published:Jun 22, 2009
    Last Modified:Apr 23, 2026
    EPS:Jun 22, 2009
    EPSS Score:0.03478
    CVSS Score:5

    Affected Products

    Vendor
    Ocsinventory-ng
    Product
    Ocs Inventory Ng
    Vendor
    Unix
    Product
    Unix

    Exploits

    http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtmlhttp://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtmlhttps://www.exploit-db.com/exploits/8868

    Related CVEs

    CVE-2023-53947 (CVSS 8.5) — OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escala…
    CVE-2011-4024 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote a…
    CVE-2010-1733 (CVSS 6.8) — Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arb…
    CVE-2010-1594 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow r…
    CVE-2010-1595 (CVSS 7.5) — Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attacke…
    CVE-2009-3042 (CVSS 7.5) — SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remo…
    CVE-2009-0667 (CVSS 7.2) — Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1…
    CVE-2009-3040 (CVSS 7.5) — Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow re…
    CVE-2009-1769 (CVSS 5) — The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates di…
    CVE-2009-1443 (CVSS 10) — Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impa…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High