VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2010· Updated Jun 16, 2026

CVE-2010-1594

CVE-2010-1594

Description

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Ocsinventory Ng/Ocsinventory Ng2 versions
    cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.02.1:*:*:*:*:*:*:*
    • (no CPE)range: =1.02.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.