CVE-2009-3042
Publication date 1 September 2009
Last updated 24 July 2024
Ubuntu priority
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.
Status
Package | Ubuntu Release | Status |
---|---|---|
ocsinventory-server | ||
18.04 LTS bionic |
Not affected
|
|
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |