CVE-2010-1733
published 2010-05-06CVE-2010-1733: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory…
PriorityP432medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.02%
59.1th percentile
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ocsinventory-server | < ocsinventory-server 2.0-1 (bookworm) | ocsinventory-server 2.0-1 (bookworm) |
| ocsinventory-ng | ocs_inventory_ng | <= 1.02.1 | — |
| ocsinventory-ng | ocs_inventory_ng | — | — |
| ocsinventory-ng | ocs_inventory_ng | — | — |
| ocsinventory-ng | ocs_inventory_ng | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gqwx-r9ff-8pph: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1
ghsa_unreviewed·2022-05-17
CVE-2010-1733 [MEDIUM] CWE-89 GHSA-gqwx-r9ff-8pph: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
OSV
CVE-2010-1733: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1
osv·2010-05-06·CVSS 6.8
CVE-2010-1733 [MEDIUM] CVE-2010-1733: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Debian
CVE-2010-1733: ocsinventory-server - Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow r...
vendor_debian·2010·CVSS 6.8
CVE-2010-1733 [MEDIUM] CVE-2010-1733: ocsinventory-server - Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow r...
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Scope: local
bookworm: resolved (fixed in 2.0-1)
bullseye: resolved (fixed in 2.0-1)
sid: resolved (fixed in 2.0-1)
No detection rules found.
No public exploits indexed.
http://osvdb.org/61942http://secunia.com/advisories/38311http://www.mandriva.com/security/advisories?name=MDVSA-2010:178https://exchange.xforce.ibmcloud.com/vulnerabilities/55873http://osvdb.org/61942http://secunia.com/advisories/38311http://www.mandriva.com/security/advisories?name=MDVSA-2010:178https://exchange.xforce.ibmcloud.com/vulnerabilities/55873
2010-05-06
Published