CVE-2010-1594: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega1 parameter. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1594?
CVE-2010-1594 has been classified as a medium severity vulnerability due to the potential impact of cross-site scripting attacks.
How do I fix CVE-2010-1594?
To fix CVE-2010-1594, ensure that you are using a patched version of OCS Inventory NG that addresses the XSS vulnerabilities.
What are the affected components in CVE-2010-1594?
CVE-2010-1594 specifically affects the ocsreports/index.php file in OCS Inventory NG version 1.02.1.
Can CVE-2010-1594 be exploited remotely?
Yes, CVE-2010-1594 can be exploited remotely by attackers through crafted requests to the affected software.
What type of attack is associated with CVE-2010-1594?
CVE-2010-1594 is associated with cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web script or HTML.