Mandriva Linux Security Advisory 2012-053 - Cross-site scripting vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The updated packages have been patched to correct this issue.
e062601fd9052b4265d4c0f2a927f4c0066187386040527ee66a5217eb8916df
OCS Inventory NG version 2.0.1 suffers from a persistent cross site scripting vulnerability.
2edc29ba63a069d988d3b4b142e76efb8065de62461e42ceb42809493e2fbbd2