CVE-2009-2166
CVE-2009-2166
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter.
EPSS 3.2% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ocsinventory-server Debian:12
- Affected ranges
- ECOSYSTEM: < 1.02.1-1
Update to 1.02.1-1