CVE-2010-1733

2010-05-0600:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

49.0%

JSON

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3
allow remote attackers to execute arbitrary SQL commands via (1) multiple
inventory fields to the search form, reachable through index.php; or (2)
the “Software name” field to the “All softwares” search form, reachable
through index.php. NOTE: the provenance of this information is unknown;
the details are obtained solely from third party information.