Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting Blind SQL Injection

Alienvault Open Source SIEM OSSIM 3.1 - Reflected Cross-Site Scripting Blind SQL Injection !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an...

Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection

!/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user session:...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3834

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Sql injection

SQL injection vulnerability in forensics/baseqrymain.php in AlienVault Open Source Security Information Management OSSIM 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time00 parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3834

CVE-2012-3834 affects AlienVault Open Source SIEM (OSSIM) 3.1. The vulnerability is an SQL injection in forensics/base_qry_main.php that allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter. Documented impact is partial confidentiality/integrity/availab...

CVE-2012-3835

Multiple cross-site scripting XSS vulnerabilities in AlienVault Open Source Security Information Management OSSIM 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to top.php or 2 time00 parameter to forensics/baseqrymain.php, which is not properly handled ...

CVE-2012-3835

CVE-2012-3835 affects AlienVault Open Source Security Information Management (OSSIM) 3.1. The vulnerability consists of multiple cross-site scripting (XSS) flaws where an attacker can inject arbitrary web scripts or HTML via the url parameter of top.php or the time[0][0] parameter of forensics/ba...

Alienvault OSSIM Open Source SIEM 3.1 Multiple Security Vulnerabilities

Exploit for php platform in category web applications Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Contact: email protected Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL:...

Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities

Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open Source SIEM 3.1 32bit Vendor URL: http://www.alienvault.com/ Vendo...

Alienvault Open Source SIEM (OSSIM) 3.1 - Multiple Vulnerabilities

Alienvault Open Source SIEM OSSIM 3.1 - Multiple Vulnerabilities Advisory: Alienvault OSSIM Open Source SIEM 3.1 Multiple security vulnerabilities Advisory ID: SSCHADV-EDB-2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Alienvault Open...

BackTrack 5 ( BT5 ) Coming Soon !

BackTrack 5 BT5 Coming Soon ! We're behind schedule with BackTrack 5, but are working hard to make up for lost time. We thought we'd post a few pictures for your enjoyment of the development BT5 ISO we're working on. The screenshots were taken on a 2.6.38-rc5 kernel. The screenshot above is of th...

CSRF Vulnerability in OSSIM 2.2.1

================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...

OSSIM 2.2.1 CSRF Vulnerability

Exploit for php platform in category web applications ============================== OSSIM 2.2.1 CSRF Vulnerability ============================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com...

OSSIM 2.2.1 Cross Site Scripting

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...

OSSIM 2.2.1 Cross Site Request Forgery

================== Summary ================== CSRF Vulnerability in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 4/01/2010 Vendor: Alienvault www.alienvault.com ============= Technical Details ============= The page /ossim/controlpanel/alarmconsole.php is vulnerable...

OSSIM 2.2.1 - '$_SERVER['PHP_SELF']' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39145/info OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Multiple XSS vulnerabilities in OSSIM 2.2.1

================== Summary ================== Multiple XSS vulnerabilities in OSSIM 2.2.1 Discovered by: CONIX Security www.conix.fr Public Release Date: 3/31/2010 Vendor: Alienvault www.alienvault.com Fixed: Yes 3/30/2010 ============= Technical Details ============= 1. An attacker can redirect ...