CVE-2010-1595

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2010-1595

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2010-1595.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2010-1595

Downstream

DEBIAN-CVE-2010-1595

Published

2010-04-28T23:30:00Z

Modified

2026-04-10T03:41:13.381920Z

Summary

[none]

Details

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val1, or (3) ongletbis parameter.

References

http://secunia.com/advisories/38311
http://www.mandriva.com/security/advisories?name=MDVSA-2010:178
http://packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt
http://osvdb.org/61942
https://exchange.xforce.ibmcloud.com/vulnerabilities/55872

CVE-2010-1595

Affected packages