Unrated severityNVD Advisory· Published Apr 28, 2010· Updated Apr 29, 2026

CVE-2010-1594

Description

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.

Affected products

Ocsinventory Ng/Ocsinventory Ng
cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txtnvdExploit
secunia.com/advisories/38311nvdVendor Advisory
osvdb.org/61943nvd
www.mandriva.com/security/advisoriesnvd
exchange.xforce.ibmcloud.com/vulnerabilities/55874nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000