449 matches found
CVE-2009-3441: Improper Authentication
Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to 1 graphs/alarmsevents.php or 2 host/drawtree.php...
CVE-2009-3440: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI aka the main menu...
OSSIM 2.1 SQL Injection / XSS
OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...
OSSIM 2.1 SQL Injection and xss
Exploit for unknown platform in category web applications =============================== OSSIM 2.1 SQL Injection and xss =============================== OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3...
OSSIM 2.1 SQL Injection and xss
No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...
[DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities
OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...
OSSIM 2.1 - SQL Injection Cross-Site Scripting
OSSIM 2.1 - SQL Injection Cross-Site Scripting OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions...
OSSIM 2.1 - SQL Injection / Cross-Site Scripting
OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...
OSSIM Server Detection
A OSSIM server is listening on the remote system. Description : The remote system is running an OSSIM server. OSSIM Open Source Security Information Management is a centralized security management information system. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be...
Cross site scripting
Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...
CVE-2008-0919
Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...
Sql injection
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
CVE-2008-0920
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
CVE-2008-0920
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
CVE-2008-0920
CVE-2008-0920 describes an SQL injection in OSSIM 0.9.9 rc5, specifically in port/modifyportform.php where the portname parameter is not adequately validated by a regex. This allows remote authenticated users to execute arbitrary SQL commands. The description details that the vulnerability affect...
CVE-2008-0919
CVE-2008-0919 affects OSSIM (Open Source Security Information Management) up to version 0.9.9 RC5, where the dest parameter of session/login.php is not sanitized. This XSS vulnerability allows an unauthenticated attacker to inject arbitrary HTML/JavaScript that could execute in the victim’s brows...
CVE-2008-0919
Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...
CVE-2008-0920: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities
No description provided by source. Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail:...
