CVE-2011-4024

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-10-21 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Ocsinventory-Ng Ocs Inventory Ng: through 2.0.1; 1.0, 1.0-beta, 1.0-rc1, 1.0-rc2, 1.0-rc3, 1.0-rc3-1 (+6)

References

http://osvdb.org/76135
http://secunia.com/advisories/46311
http://securityreason.com/securityalert/8477
http://www.exploit-db.com/exploits/18005
http://www.mandriva.com/security/advisories?name=MDVSA-2012:053
http://www.ocsinventory-ng.org/fr/accueil/nouvelles/version-2-0-2-stable.html
http://www.securityfocus.com/bid/50011
https://exchange.xforce.ibmcloud.com/vulnerabilities/70406
http://osvdb.org/76135
http://secunia.com/advisories/46311
http://securityreason.com/securityalert/8477
http://www.exploit-db.com/exploits/18005

Get alerted when CVE-2011-4024 or the next vulnerability affects your stack