Full title: OCS Inventory NG Webconsole Shell Upload Vulnerability 
Category: web applications
Platform: php
OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted.

# 0day.today @ http://0day.today/