OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues.
{
"cpe": "cpe:2.3:a:ocsinventory-ng:ocsinventory_ng:2.4.1:*:*:*:*:*:*:*",
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "2.4.1"
},
{
"last_affected": "2.4.1"
}
]
}