CVE-2011-4024
21.10.2011, 18:55
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| ocsinventory-ng | ocs_inventory_ng | 𝑥 ≤ 2.0.1 |
| ocsinventory-ng | ocs_inventory_ng | 1.0 |
| ocsinventory-ng | ocs_inventory_ng | 1.0:beta |
| ocsinventory-ng | ocs_inventory_ng | 1.0:rc1 |
| ocsinventory-ng | ocs_inventory_ng | 1.0:rc2 |
| ocsinventory-ng | ocs_inventory_ng | 1.0:rc3 |
| ocsinventory-ng | ocs_inventory_ng | 1.0:rc3-1 |
| ocsinventory-ng | ocs_inventory_ng | 1.01 |
| ocsinventory-ng | ocs_inventory_ng | 1.02 |
| ocsinventory-ng | ocs_inventory_ng | 1.02:rc1 |
| ocsinventory-ng | ocs_inventory_ng | 1.02:rc2 |
| ocsinventory-ng | ocs_inventory_ng | 1.02:rc3 |
| ocsinventory-ng | ocs_inventory_ng | 1.02.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References