CVE-2010-1594

EPSS 0.33%

發布日:2010/4/28修改日:2026/4/28

也稱為:DEBIAN-CVE-2010-1594

描述

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.

受影響套件(1)

Debian/ocsinventory-serverfrom 0, < 1.02.1-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2010-1594