CVE-2009-2166

概要

参考情報

• leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml · Exploit
• securityfocus.com/archive/1/504047/100/0/threaded
• exchange.xforce.ibmcloud.com/vulnerabilities/50946
• exploit-db.com/exploits/8868

ocs inventory ng のその他の脆弱性

• CVE-2011-4024中 4.3Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary w…
• CVE-2010-1733中 6.8Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) mu…
• CVE-2010-1595高 7.5Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL co…
• CVE-2010-1594中 4.3Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbi…
• CVE-2009-3042高 7.5SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitr…