CVE Feed

    Dashboard / CVE / CVE-2010-1733

    CVE-2010-1733

    Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

    Published:May 5, 2010
    Last Modified:Apr 11, 2025
    EPS:May 5, 2010
    EPSS Score:0.00371
    CVSS Score:6.8

    Affected Products

    Vendor
    Ocsinventory-ng
    Product
    Ocs Inventory Ng

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-53947 (CVSS 8.5) — OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escala…
    CVE-2011-4024 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote a…
    CVE-2010-1594 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow r…
    CVE-2010-1595 (CVSS 7.5) — Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attacke…
    CVE-2009-3042 (CVSS 7.5) — SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remo…
    CVE-2009-0667 (CVSS 7.2) — Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1…
    CVE-2009-2166 (CVSS 5) — Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attac…
    CVE-2009-3040 (CVSS 7.5) — Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow re…
    CVE-2009-1769 (CVSS 5) — The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates di…
    CVE-2009-1443 (CVSS 10) — Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impa…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High