OCS Inventory NG Server 'login' Parameter SQL Injection Vulnerability

Bugtraq ID: 38005
Class: Input Validation Error
CVE:
Remote: Yes
Local: No
Published: Jan 29 2010 12:00AM
Updated: Jan 29 2010 12:00AM
Credit: Nicolas DEROUET
Vulnerable: OCS Inventory Team OCS Inventory NG Server 1.2.1
OCS Inventory Team OCS Inventory NG Server 1.3b3
OCS Inventory Team OCS Inventory NG Server 1.02
OCS Inventory Team OCS Inventory NG Server 1.01
OCS Inventory Team OCS Inventory NG Server 1.00
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus