CVE-2010-1595: Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote atta...

Security readout for executives and security teams

CVE-2010-1595 is a remote SQL injection issue in OCS Inventory NG 1.02.1. An attacker reaching the reports interface could manipulate database queries through specific request parameters. For an asset inventory system, database compromise may expose device and environment information useful for later attacks. Exposure is most likely where OCS Inventory NG 1.02.1 is still deployed and the ocsreports interface is reachable by untrusted users or networks. Internet-facing or broadly internal inventory portals deserve priority review. Prioritize if legacy OCS Inventory NG is still used, especially if reachable beyond a tightly controlled admin network. Asset inventory data can reveal systems, software, and network structure, making this a meaningful business exposure even without confirmed active exploitation. Mitigation focus: Confirm whether OCS Inventory NG 1.02.1 is present in any environment.; Review Mandriva and upstream vendor guidance for the supported fixed package or upgrade path.; Restrict access to the OCS reports interface to trusted administrators only..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.