CVE-2011-4024

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.1%

from disclosure to weapon0 days

Published on NVDOct 21

1st PoCOct 20

exploitation probability

5.1%top 8% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/18005unverified cve_referencewww.exploit-db.com/exploits/18005unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/76135 http://secunia.com/advisories/46311 http://securityreason.com/securityalert/8477 https://exchange.xforce.ibmcloud.com/vulnerabilities/70406 http://www.exploit-db.com/exploits/18005 http://www.mandriva.com/security/advisories?name=MDVSA-2012:053 http://www.ocsinventory-ng.org/fr/accueil/nouvelles/version-2-0-2-stable.html http://www.securityfocus.com/bid/50011