XSS in Ocsinventory-Ng Ocs Inventory Ng
CVE-2010-1594
Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.011 (63.1th percentile) — read the EPSS interpretation.
Affected products
- Ocsinventory-ng Ocs_inventory_ng — versions 1.02.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA)
- cve@mitre.org (vdb-entry, x_refsource_XF)