CVE-2018-1000557

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.

• CWE-79

• https://www.ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released/Release Notes, Vendor Advisory
• https://www.secuvera.de/advisories/secuvera-SA-2017-03.txtExploit, Third Party Advisory
• https://www.ocsinventory-ng.org/en/ocs-inventory-server-2-4-1-has-been-released/Release Notes, Vendor Advisory
• https://www.secuvera.de/advisories/secuvera-SA-2017-03.txtExploit, Third Party Advisory

Published

Jun 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000551Trovebox version <= 4.0.0-rc6 contains a PHP Type juggling v…
• CVE-2018-1000552Trovebox version <= 4.0.0-rc6 contains a SQL Injection vulne…
• CVE-2018-1000553Trovebox version <= 4.0.0-rc6 contains a Server-Side request…
• CVE-2018-1000554Trovebox version <= 4.0.0-rc6 contains a Unsafe password res…
• CVE-2018-1000555Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000556WordPress version 4.8 + contains a Cross Site Scripting (XSS…
• CVE-2018-1000558OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version…
• CVE-2018-1000559qutebrowser version introduced in v0.11.0 (1179ee7a937fb3141…
• CVE-2018-1000600A exposure of sensitive information vulnerability exists in …
• CVE-2018-1000601A arbitrary file read vulnerability exists in Jenkins SSH Cr…
• CVE-2018-1000602A session fixation vulnerability exists in Jenkins SAML Plug…
• CVE-2018-1000603A exposure of sensitive information vulnerability exists in …