SecuritySpace - CVE-2010-1733

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-1733

Description: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Test IDs: 1.3.6.1.4.1.25623.1.0.902059

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-1733
http://www.mandriva.com/security/advisories?name=MDVSA-2010:178
http://osvdb.org/61942
http://secunia.com/advisories/38311
XForce ISS Database: ocsinventoryng-searchform-sql-injection(55873)
https://exchange.xforce.ibmcloud.com/vulnerabilities/55873

CVE ID:	CVE-2010-1733
Description:	Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Test IDs:	1.3.6.1.4.1.25623.1.0.902059
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1733 http://www.mandriva.com/security/advisories?name=MDVSA-2010:178 http://osvdb.org/61942 http://secunia.com/advisories/38311 XForce ISS Database: ocsinventoryng-searchform-sql-injection(55873) https://exchange.xforce.ibmcloud.com/vulnerabilities/55873