CVE Feed

    Dashboard / CVE / CVE-2009-3042

    CVE-2009-3042

    SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.

    Published:Aug 11, 2009
    Last Modified:Apr 23, 2026
    EPS:Sep 1, 2009
    EPSS Score:0.00364
    CVSS Score:7.5

    Affected Products

    Vendor
    Ocsinventory-ng
    Product
    Ocs Inventory Ng

    Exploits

    https://www.exploit-db.com/exploits/9416

    Related CVEs

    CVE-2023-53947 (CVSS 8.5) — OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escala…
    CVE-2011-4024 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote a…
    CVE-2010-1733 (CVSS 6.8) — Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arb…
    CVE-2010-1594 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow r…
    CVE-2010-1595 (CVSS 7.5) — Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attacke…
    CVE-2009-0667 (CVSS 7.2) — Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1…
    CVE-2009-2166 (CVSS 5) — Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attac…
    CVE-2009-3040 (CVSS 7.5) — Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow re…
    CVE-2009-1769 (CVSS 5) — The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates di…
    CVE-2009-1443 (CVSS 10) — Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impa…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High