tocsin

Debian/ocsinventory-server: unknown

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val_1, or (3) onglet_bis parameter

Action: Upgrade ocsinventory-server to 1.02.1-1 or later.

Affected

introducedfixedlast affected
01.02.1-1-

Fixed versions

1.02.1-1

Sources

published · modified · JSON