View at Official debian advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2009-2166 unimportant priority: Debian including 1 source packages (ocsinventory-server), 3 status rows across 3 suites (bookworm, bullseye, sid): resolved 3.
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter.