tocsin

Debian/ocsinventory-server: unknown

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the B

Action: Upgrade ocsinventory-server to 1.02.1-1 or later.

Affected

introducedfixedlast affected
01.02.1-1-

Fixed versions

1.02.1-1

Sources

published · modified · JSON