CVE-2018-1000557

Mô tả

Tham khảo

• ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released · Release Notes
• secuvera.de/advisories/secuvera-SA-2017-03.txt · Exploit

Lỗ hổng khác của ocsinventory ng

• CVE-2018-14473NGHIÊM TRỌNG 9.1OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attac…
• CVE-2018-12483CAO 8.8OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdisco…
• CVE-2018-12482CAO 8.8OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues.
• CVE-2018-1000558TRUNG BÌNH 6.5OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can res…