CVE-2018-1000558

概要

参考情報

• ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released · Release Notes
• secuvera.de/advisories/secuvera-SA-2017-04.txt · Exploit

ocsinventory ng のその他の脆弱性

• CVE-2018-14473緊急 9.1OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attac…
• CVE-2018-12483高 8.8OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdisco…
• CVE-2018-12482高 8.8OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues.
• CVE-2018-1000557中 6.1OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functiona…