CVE Feed

    Dashboard / CVE / CVE-2010-1594

    CVE-2010-1594

    Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.

    Published:Apr 28, 2010
    Last Modified:Apr 11, 2025
    EPS:Apr 28, 2010
    EPSS Score:0.00329
    CVSS Score:4.3

    Affected Products

    Vendor
    Ocsinventory-ng
    Product
    Ocs Inventory Ng

    Exploits

    http://packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txthttp://packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt

    Related CVEs

    CVE-2023-53947 (CVSS 8.5) — OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escala…
    CVE-2011-4024 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote a…
    CVE-2010-1733 (CVSS 6.8) — Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arb…
    CVE-2010-1595 (CVSS 7.5) — Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attacke…
    CVE-2009-3042 (CVSS 7.5) — SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remo…
    CVE-2009-0667 (CVSS 7.2) — Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1…
    CVE-2009-2166 (CVSS 5) — Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attac…
    CVE-2009-3040 (CVSS 7.5) — Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow re…
    CVE-2009-1769 (CVSS 5) — The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates di…
    CVE-2009-1443 (CVSS 10) — Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impa…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High