CVE-2010-1733

Published May 6, 2010

Last updated 7 years ago

Overview

Description: Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2) the "Software name" field to the "All softwares" search form, reachable through index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92DB2ED9-8024-4EC1-8595-D47DF8219D62",
            "versionEndIncluding": "1.02.1"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3E915093-BDDA-4A75-A0D0-819246D94249"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F8B28BF3-C16C-458A-BC9B-23631D2B7623"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1D9ACDD1-0586-47F1-9421-F4D176BF438E"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2E49644A-ECAA-4B72-9179-464C98B0C2EE"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:*:unix:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1C4201BC-7C0A-4B66-9ECD-A395A5012AC8"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73D26134-3129-432B-AA9E-5062E2792F10"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A113F25A-CC82-428A-AA56-16BBA3D3C736"
          },
          {
            "criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C0FCAE6C-0F9F-4B8A-97B4-2EF4ED76C5FF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References