Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OCS Inventory NG HTML注入漏洞
Vulnerability Description
OCS Inventory NG（Open Computer and Software Inventory Next Generation）是OCS Inventory团队开发的一套资产管理软件。该软件能够帮助管理员掌握计算机软件安装和配置，以及在HTTP代理和服务器之间实现低网络流量通讯。 OCS Inventory NG 2.0.1及之前的版本中存在HTML注入漏洞。该漏洞源于用户提供的输入被用于生成内容之前没有经过正确的过滤，攻击者提供的的HTML和脚本代码可运行在受影响浏览器的上下文中，并盗取基于
CVSS Information
N/A
Vulnerability Type
N/A