| Package | Affected versions | Patched versions |
|---|---|---|
| ocs inventory server | ≤ 2.5 |
Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free