CVE-2009-3042
ocsinventory-ng ocs inventory ng: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ocsinventory-ng:ocs_inventory_ng
References
- http://seclists.org/fulldisclosure/2009/Aug/0143.html
- http://secunia.com/advisories/35311
- http://www.exploit-db.com/exploits/9416
- http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=147&cntnt01returnid=15
- http://www.securityfocus.com/archive/1/505675/100/0/threaded