CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Sql injection

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3834

CVE-2012-3834 affects AlienVault Open Source SIEM (OSSIM) 3.1. The vulnerability is an SQL injection in forensics/base_qry_main.php that allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter. Documented impact is partial confidentiality/integrity/availab...

CVE-2012-3835

CVE-2012-3835 affects AlienVault Open Source Security Information Management (OSSIM) 3.1. The vulnerability consists of multiple cross-site scripting (XSS) flaws where an attacker can inject arbitrary web scripts or HTML via the url parameter of top.php or the time[0][0] parameter of forensics/ba...

PT-2012-5031

Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management OSSIM version 3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the url parameter to "top.php" or the time00...

CVE-2012-3834: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

CVE-2012-3835: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

PT-2012-5030

Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management OSSIM version 3.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the time00 parameter in the forensics/base qry main.php...

Alienvault OSSIM Open Source SIEM 3.1 Multiple Security Vulnerabilities

Exploit for php platform in category web applications Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Contact: email protected Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL:...

Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities

Alienvault Open Source SIEM OSSIM 3.1 - Multiple Vulnerabilities Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open...

Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities

Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL: http://www.alienvault.com/ Vendo...

OSSIM 2.2.1 CSRF Vulnerability

Exploit for php platform in category web applications ============================== OSSIM 2.2.1 CSRF Vulnerability ============================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com...

OSSIM 2.2.1 Cross Site Scripting

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...

OSSIM 2.2.1 Cross Site Request Forgery

================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...

Multiple XSS vulnerabilities in OSSIM 2.2.1

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...

OSSIM repository_attachment.php页面任意文件上传漏洞

BUGTRAQ ID: 37377 OSSIM即开源安全信息管理（Open Source Security Information Management），是一个非常流行和完整的开源安全管理系统。 OSSIM的ossiminstall/repository/repositoryattachment.php脚本没有正确地执行安全检查，用户可以向Webroot中的文件夹上传带有任意扩展名的文件。如果用户上传了包含有某些Web Shell的PHP脚本，就会导致执行任意PHP代码。 AlienVault OSSIM 2.2 AlienVault OSSIM 2.1.5 厂商补丁：...