Sql injection

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

UBUNTU-CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

CVE-2013-5321

CVE-2013-5321 involves multiple SQL injection vulnerabilities in AlienVault OSSIM 4.1, allowing remote attackers to inject arbitrary SQL via specific parameters: sensor in forensics/base_qry_main.php; tcp_flags[] or tcp_port[0][4] in forensics/base_stat_alerts.php; ip_addr[1][8] or port_type in f...

CVE-2013-5300

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to 1 vulnmeter/index.php or 2 vulnmeter/sched.php; the 3 section parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to 1 vulnmeter/index.php or 2 vulnmeter/sched.php; the 3 section parameter to...

CVE-2013-5300

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to 1 vulnmeter/index.php or 2 vulnmeter/sched.php; the 3 section parameter to...

CVE-2013-5300

CVE-2013-5300 affects AlienVault Open Source Security Information Management (OSSIM) prior to 4.3.0. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the following parameters: withoutmenu (in vulnmeter/index.php ...

Alienvault OSSIM Cross Site Scripting

Title: Alienvault OSSIM Open Source SIEM 4.2.3 Multiple Reflected XSS Vulnerabilities Date: July 25, 2013 Author: xistence [email protected] Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: June 24, 2013 Fix: Upgrade to version 4.3.0 Timeline: --------- 24 Jun 2013: Vulnerability...

Alienvault Open Source SIEM (OSSIM) - Multiple Cross-Site Scripting Vulnerabilities

Alienvault Open Source SIEM OSSIM - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/61456/info Open Source SIEM OSSIM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may levera...

Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities

Alienvault Open Source SIEM OSSIM 4.1 - Multiple SQL Injection Vulnerabilities Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013...

Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities

Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013 Timeline: --------- 17 Feb 2013: Vulnerability Reported to AlienVault 19 Feb 2013:...

Alienvault OSSIM SIEM 4.1 SQL Injection Vulnerability

Alienvault OSSIM open source SIEM version 4.1 suffers from multiple remote SQL injection vulnerabilities. Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reporte...

Alienvault OSSIM SIEM 4.1 SQL Injection

Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013 Timeline: --------- 17 Feb 2013: Vulnerability Reported to AlienVault 19 Feb 2013:...

Alienvault Open Source SIEM (OSSIM) 4.1.2 - Multiple SQL Injections

Alienvault Open Source SIEM OSSIM 4.1.2 - Multiple SQL Injections RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2. Description 3. Affected Products ...

Alienvault Open Source SIEM (OSSIM) 4.1.2 - Multiple SQL Injections

RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2. Description 3. Affected Products 4. Vulnerabilities 5. Solution 6. Credit 7. Disclosure Timeline 1...

AlienVault OSSIM 4.1.2 SQL Injection Vulnerability

AlienVault OSSIM versions 4.1.2 and below suffer from remote SQL injection vulnerabilities. RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2...

AlienVault OSSIM 4.1.2 SQL Injection

RunRunLevel Web Security Research - AlienVault OSSIM multiple SQL Injection vulnerabilities Vendor Website : http://www.alienvault.com INDEX --------------------------------------- 1. Background 2. Description 3. Affected Products 4. Vulnerabilities 5. Solution 6. Credit 7. Disclosure Timeline 1...

New Attacks Leverage Adobe Sandbox Bypass Against Uyghur Activists

Attackers with a control infrastructure based in China are leveraging the same vulnerability exploited by Miniduke to attack Uyghur and Tibetan activists with new exploits. Researchers at Kaspersky Lab and AlienVault discovered a spear phishing campaign targeting non-governmental activists with P...