CVE-2015-4046: Improper Neutralization of Special Elements used in a Command

The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/doscan.php...

PT-2017-6722

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 5.0.1 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by manipulating the assets array parameter in the /netscan/do scan.php API endpoint. Recommendatio...