DEBIAN-CVE-2010-1733

Source
https://security-tracker.debian.org/tracker/CVE-2010-1733
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-1733.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2010-1733
Upstream
Published
2010-05-06T12:47:23.800Z
Modified
2026-04-28T20:06:10.431529Z
Summary
[none]
Details

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

Affected packages

Debian:11 / ocsinventory-server

Package

Name
ocsinventory-server
Purl
pkg:deb/debian/ocsinventory-server?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-1733.json"

Debian:12 / ocsinventory-server

Package

Name
ocsinventory-server
Purl
pkg:deb/debian/ocsinventory-server?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2010-1733.json"