Ocs Inventory Ng
Approved changes feed: RSS · Atom
cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02.1:*:*:*:*:*:*:*
part: a version: 1.02.1 update: *
| Vendor | Ocsinventory Ng (dbdc0856-cab8-5e28-9450-b6d900921e8c) |
|---|---|
| Product | Ocs Inventory Ng (3336ded5-2f48-51de-9c7b-82725bf8f730) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ocsinventory-ng/ocsinventory-ocsreports |
purl2cpe | 2026-06-01 10:17:04.436836 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4024 |
vulnerable | 2026-06-08 04:59:28.799075 |
Details available
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-21T18:00:00.000Z
Updated: 2024-08-06T23:53:32.676Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1595 |
vulnerable | 2026-06-08 04:54:09.230371 |
Details available
Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val_1, or (3) onglet_bis parameter.
Published: 2010-04-28T23:00:00.000Z
Updated: 2024-08-07T01:28:41.759Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1594 |
vulnerable | 2026-06-08 04:54:09.229919 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.
Published: 2010-04-28T23:00:00.000Z
Updated: 2024-08-07T01:28:42.117Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3042 |
vulnerable | 2026-06-08 04:51:32.043317 |
Details available
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.
Published: 2009-09-01T18:04:00.000Z
Updated: 2024-08-07T06:14:56.340Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.