CVE-2009-3040

EPSS 0.14%

發布日:2009/9/1修改日:2026/4/28

也稱為:DEBIAN-CVE-2009-3040

描述

Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download.php and the (5) SYSTEMID parameter to group_show.php.

受影響套件(1)

Debian/ocsinventory-serverfrom 0, < 1.02.1-2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-3040