CVE-2018-12483

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. Authentication is needed in order to exploit this vulnerability.

• CWE-78

• https://www.tarlogic.com/en/blog/vulnerabilities-in-ocs-inventory-2-4-1/Exploit, Third Party Advisory
• https://www.tarlogic.com/en/blog/vulnerabilities-in-ocs-inventory-2-4-1/Exploit, Third Party Advisory

Published

Aug 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12478A Improper Input Validation vulnerability in Open Build Serv…4.8
• CVE-2018-12479A Improper Input Validation vulnerability in Open Build Serv…6.5
• CVE-2018-1248RSA Authentication Manager Security Console, Operation Conso…
• CVE-2018-12480Mitigates an XSS issue in NetIQ Access Manager versions prio…
• CVE-2018-12481The Olive Tree Ftp Server application 1.32 for Android has a…
• CVE-2018-12482OCS Inventory 2.4.1 contains multiple SQL injections in the …
• CVE-2018-1249Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce…6.5
• CVE-2018-12491PHPOK 4.9.032 has an arbitrary file upload vulnerability in …
• CVE-2018-12492PHPOK 4.9.032 has an arbitrary file deletion vulnerability i…
• CVE-2018-12493An issue was discovered in PublicCMS V4.0.20180210. There is…
• CVE-2018-12494An issue was discovered in PublicCMS V4.0.20180210. There is…
• CVE-2018-12495The quoteblock function in markdown.c in libmarkdown.a in DI…