CVE-2009-4373

Unrestricted file upload vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then...

CVE-2009-4373

CVE-2009-4373 describes an unrestricted file upload in AlienVault OSSIM (OSSIM) versions including 2.1.5, with potential earlier releases. The flaw resides in repository/repository_attachment.php, allowing remote attackers to execute arbitrary code by uploading a file with an executable extension...