CVE-2010-1595: SQL Injection
Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val1, or (3) ongletbis parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1595?
CVE-2010-1595 is considered a medium severity SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2010-1595?
To fix CVE-2010-1595, upgrade OCS Inventory NG to a version newer than 1.02.1 that contains the necessary security patches.
Which software versions are affected by CVE-2010-1595?
CVE-2010-1595 affects OCS Inventory NG version 1.02.1.
What are the potential impacts of exploiting CVE-2010-1595?
Exploitation of CVE-2010-1595 can lead to unauthorized access to the database and execution of arbitrary SQL commands.
How can I detect if my system is vulnerable to CVE-2010-1595?
You can detect vulnerability to CVE-2010-1595 by testing input parameters in OCS Inventory NG 1.02.1 for SQL injection behavior.