AlienVault 4.6.1 SQL Injection

Exploit Title: AlienVault newpolicyform.php SQLi Date: 5/9/2014 Exploit Author: chrisdhebertatgmail.com Vendor Homepage: http://www.alienvault.com/ Software Link: http://www.alienvault.com/free-downloads-services Version: 4.6.1 and below Tested on: Linux CVE : n/a Vendor Security Advisory :...

AlienVault Authenticated SQL Injection Arbitrary File Read

AlienVault 4.6.1 and below is susceptible to an authenticated SQL injection attack against newpolicyform.php, using the 'insertinto' parameter. This module exploits the vulnerability to read an arbitrary file from the file system. Any authenticated user is able to exploit this, as administrator...

AlienVault OSSIM av-centerd Command Injection

This module exploits a code execution flaw in AlienVault 4.6.1 and prior. The vulnerability exists in the av-centerd SOAP web service, where the updatesysteminfodebianpackage method uses perl backticks in an insecure way, allowing command injection. This module has been tested successfully on...

AlienVault OSSIM SQL注入以及远程代码执行

这个模块利用一个未授权SQL注入漏洞，影响AlienVault OSSIM 4.3.1以下版本。这个SQL注入漏洞可以用来找回一个活动的admin session ID，如果一个管理员级别的用户被认证了，payload中一个action可以创建一个高授权策略来执行任意代码。 0 4.3.1以及更低的版本 更新为最新的AlienVault OSSIM This module requires Metasploit: http//metasploit.com/download Current source:...

AlienVault OSSIM SQL Injection / Code Execution Exploit

This Metasploit module exploits an unauthenticated SQL injection vulnerability affecting AlienVault OSSIM versions 4.3.1 and lower. The SQL injection issue can be abused in order to retrieve an active admin session ID. If an administrator level user is identified, remote code execution can be...

Alienvault Open Source SIEM (OSSIM) - SQL Injection / Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "AlienVault OSSIM SQL Injection and Remote Code Execution", 'Description' = %q This module exploits an unauthenticated SQL injection...

AlienVault OSSIM SQL Injection / Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "AlienVault OSSIM SQL Injection and Remote Code Execution", 'Description' = %q This module exploits an unauthenticated SQL injection...

Alienvault 4.3.1 - SQL Injection / Cross-Site Scripting

AlienVault 4.3.1 Unauthenticated SQL Injection Vulnerability Type: SQL Injection Reporter: Sasha Zivojinovic Company: Gotham Digital Science Affected Software: AlienVault 4.3.1 Severity: Critical =========================================================== Summary...

AlienVault OSSIM SQL Injection and Remote Code Execution

This module exploits an unauthenticated SQL injection vulnerability affecting AlienVault OSSIM versions 4.3.1 and lower. The SQL injection issue can be abused in order to retrieve an active admin session ID. If an administrator level user is identified, remote code execution can be gained by...

Alienvault 4.3.1 - SQL Injection Cross-Site Scripting

Alienvault 4.3.1 - SQL Injection Cross-Site Scripting AlienVault 4.3.1 Unauthenticated SQL Injection Vulnerability Type: SQL Injection Reporter: Sasha Zivojinovic Company: Gotham Digital Science Affected Software: AlienVault 4.3.1 Severity: Critical...

Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Adobe Flash Player Regular Expression Heap Overflow", 'Description' = %q This module exploits a vulnerability found in the ActiveX...

AlienVault Unified Security Management "date_from" SQL注入漏洞

AlienVault Unified Security Management是一款安全管理平台。 由于通过"datefrom"参数传递到ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php的输入在被用于SQL查询前没有正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 AlienVault Unified Security Management USM 4.x 目前没有详细解决方案： http://www.alienvault.com/products...

AlienVault 4.5.0 SQL Injection Vulnerability

AlienVault version 4.5.0 suffers from an authenticated remote SQL injection vulnerability. Metasploit module proof of concept is included. The following request is vulnerable to a SQL injection attack from authenticated users. GET...

Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit)

The following request is vulnerable to a SQL injection attack from authenticated users. GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1 Host: 172.31.16.150 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101...

Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit)

Alienvault 4.5.0 - Authenticated SQL Injection Metasploit The following request is vulnerable to a SQL injection attack from authenticated users. GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1 Host: 172.31.16.150 User-Agent: Mozilla/5...

AlienVault OSSIM 'ISO27001Bar1.php' SQL注入漏洞

Bugtraq ID:66530 AlienVault OSSIM是开源的安全信息和事件管理项目。 AlienVault OSSIM 'ISO27001Bar1.php'存在漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 AlienVault OSSIM 4.5.0 目前没有详细解决方案： http://www.alienvault.com/ GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1...

AlienVault 4.5.0 SQL Injection

The following request is vulnerable to a SQL injection attack from authenticated users. GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1 Host: 172.31.16.150 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101...

AlienVault Authenticated SQL Injection Arbitrary File Read

AlienVault 4.5.0 is susceptible to an authenticated SQL injection attack via a PNG generation PHP file. This module exploits this to read an arbitrary file from the file system. Any authenticated user is able to exploit it, as administrator privileges aren't required. Module Options msf use...

AlienVault Unified Security Management: Real-Time Threat Detection Starting on Day 1

IT Infrastructure of organizations is growing ever more distributed, complex and difficult to manage. To manage such networks, a log management solution is not enough. The AlienVault Unified Security Management™ USM platform is the perfect solution to help manage the flood of information and...

AlienVault OSSIM 'tele_stats.php' SQL注入漏洞

BUGTRAQ ID: 65406 AlienVault OSSIM 是开源的安全信息和事件管理项目。 AlienVault OSSIM 4.3及其他版本在telestats.php的实现上存在SQL注入漏洞，成功利用后可使攻击者执行未授权数据库操作。 0 AlienVault OSSIM 4.3 AlienVault OSSIM 厂商补丁： AlienVault ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.alienvault.com/...