Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting Blind SQL Injection

Alienvault Open Source SIEM OSSIM 3.1 - Reflected Cross-Site Scripting Blind SQL Injection !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an...

Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection

!/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user session:...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Sql injection

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3835

CVE-2012-3835 affects AlienVault Open Source Security Information Management (OSSIM) 3.1. The vulnerability consists of multiple cross-site scripting (XSS) flaws where an attacker can inject arbitrary web scripts or HTML via the url parameter of top.php or the time[0][0] parameter of forensics/ba...

CVE-2012-3834

CVE-2012-3834 affects AlienVault Open Source SIEM (OSSIM) 3.1. The vulnerability is an SQL injection in forensics/base_qry_main.php that allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter. Documented impact is partial confidentiality/integrity/availab...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

Alienvault OSSIM Open Source SIEM 3.1 Multiple Security Vulnerabilities

Exploit for php platform in category web applications Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Contact: email protected Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL:...

Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities

Alienvault Open Source SIEM OSSIM 3.1 - Multiple Vulnerabilities Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open...

Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities

Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL: http://www.alienvault.com/ Vendo...

BackTrack 5 ( BT5 ) Coming Soon !

BackTrack 5 BT5 Coming Soon ! We're behind schedule with BackTrack 5, but are working hard to make up for lost time. We thought we'd post a few pictures for your enjoyment of the development BT5 ISO we're working on. The screenshots were taken on a 2.6.38-rc5 kernel. The screenshot above is of th...

CSRF Vulnerability in OSSIM 2.2.1

================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...

OSSIM 2.2.1 CSRF Vulnerability

Exploit for php platform in category web applications ============================== OSSIM 2.2.1 CSRF Vulnerability ============================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com...

OSSIM 2.2.1 Cross Site Scripting

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...

OSSIM 2.2.1 Cross Site Request Forgery

================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...

OSSIM 2.2.1 - $_SERVER[PHP_SELF] Cross-Site Scripting

OSSIM 2.2.1 - $SERVERPHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/39145/info OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Multiple XSS vulnerabilities in OSSIM 2.2.1

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...