AlienVault OSSIM SQL注入以及远程代码执行

这个模块利用一个未授权SQL注入漏洞，影响AlienVault OSSIM 4.3.1以下版本。这个SQL注入漏洞可以用来找回一个活动的admin session ID，如果一个管理员级别的用户被认证了，payload中一个action可以创建一个高授权策略来执行任意代码。 0 4.3.1以及更低的版本 更新为最新的AlienVault OSSIM This module requires Metasploit: http//metasploit.com/download Current source:...

AlienVault OSSIM SQL Injection / Code Execution Exploit

This Metasploit module exploits an unauthenticated SQL injection vulnerability affecting AlienVault OSSIM versions 4.3.1 and lower. The SQL injection issue can be abused in order to retrieve an active admin session ID. If an administrator level user is identified, remote code execution can be...

AlienVault OSSIM SQL Injection / Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "AlienVault OSSIM SQL Injection and Remote Code Execution", 'Description' = %q This module exploits an unauthenticated SQL injection...

Alienvault Open Source SIEM (OSSIM) - SQL Injection / Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "AlienVault OSSIM SQL Injection and Remote Code Execution", 'Description' = %q This module exploits an unauthenticated SQL injection...

AlienVault OSSIM SQL Injection and Remote Code Execution

This module exploits an unauthenticated SQL injection vulnerability affecting AlienVault OSSIM versions 4.3.1 and lower. The SQL injection issue can be abused in order to retrieve an active admin session ID. If an administrator level user is identified, remote code execution can be gained by...

AlienVault OSSIM 'ISO27001Bar1.php' SQL注入漏洞

Bugtraq ID:66530 AlienVault OSSIM是开源的安全信息和事件管理项目。 AlienVault OSSIM 'ISO27001Bar1.php'存在漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 AlienVault OSSIM 4.5.0 目前没有详细解决方案： http://www.alienvault.com/ GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1...

AlienVault 4.5.0 SQL Injection

The following request is vulnerable to a SQL injection attack from authenticated users. GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1 Host: 172.31.16.150 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101...

AlienVault OSSIM 'tele_stats.php' SQL注入漏洞

BUGTRAQ ID: 65406 AlienVault OSSIM 是开源的安全信息和事件管理项目。 AlienVault OSSIM 4.3及其他版本在telestats.php的实现上存在SQL注入漏洞，成功利用后可使攻击者执行未授权数据库操作。 0 AlienVault OSSIM 4.3 AlienVault OSSIM 厂商补丁： AlienVault ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.alienvault.com/...

AlienVault OSSIM SQL Injection vulnerability

INDEX --------------------------------------- 1. Background 2. Description 3. Affected Products 4. Vulnerability 5. Solution 6. Credit 7. Disclosure Timeline 1. BACKGROUND --------------------------------------- OSSIM by AlienVault is an Open Source Security Information and Event Management SIEM...

AlienVault OSSIM 'date_from' Parameter Multiple SQL Injection Vulnerabilities

AlienVault OSSIM is prone to multiple sql injection vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-5967

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the datefrom parameter to 1 radar-iso27001-potential.php, 2 radar-iso27001-A12ISacquisition-pot.php, 3...

Sql injection

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the datefrom parameter to 1 radar-iso27001-potential.php, 2 radar-iso27001-A12ISacquisition-pot.php, 3...

CVE-2013-5967

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the datefrom parameter to 1 radar-iso27001-potential.php, 2 radar-iso27001-A12ISacquisition-pot.php, 3...

CVE-2013-5967

CVE-2013-5967 affects AlienVault OSSIM (Open Source Security Information Management) 4.3 and earlier. The vulnerability is due to improper sanitization of the date_from parameter in multiple RadarReport scripts (e.g., radar-iso27001-potential.php and related radar-pci-potential.php) and in relate...

Alienvault Open Source SIEM (OSSIM) - Timestamp Directory Traversal

Alienvault Open Source SIEM OSSIM - Timestamp Directory Traversal source: https://www.securityfocus.com/bid/62899/info Open Source SIEM OSSIM is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker ...

Alienvault Open Source SIEM (OSSIM) - 'Timestamp' Directory Traversal

source: https://www.securityfocus.com/bid/62899/info Open Source SIEM OSSIM is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to gain access to arbitrary system files. Information harvested ma...

Alienvault Open Source SIEM (OSSIM) 3.1 - 'date_from' Multiple SQL Injections

source: https://www.securityfocus.com/bid/62790/info Open Source SIEM OSSIM is prone to multiple SQL-injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Open Sourc...

Alienvault Open Source SIEM (OSSIM) 3.1 - date_from Multiple SQL Injections

Alienvault Open Source SIEM OSSIM 3.1 - datefrom Multiple SQL Injections source: https://www.securityfocus.com/bid/62790/info Open Source SIEM OSSIM is prone to multiple SQL-injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data,...

CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...