OSSIM 2.2.1 Cross Site Request Forgery

================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...

Multiple XSS vulnerabilities in OSSIM 2.2.1

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...