OSSIM 2.1 - SQL Injection Cross-Site Scripting

OSSIM 2.1 - SQL Injection Cross-Site Scripting OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions...

OSSIM 2.1 SQL Injection and xss

No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...

OSSIM 2.1 SQL Injection and xss

Exploit for unknown platform in category web applications =============================== OSSIM 2.1 SQL Injection and xss =============================== OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3...

OSSIM Server Detection

A OSSIM server is listening on the remote system. Description : The remote system is running an OSSIM server. OSSIM Open Source Security Information Management is a centralized security management information system. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be...

CVE-2008-0919

Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

Sql injection

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...

Cross site scripting

Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

CVE-2008-0920

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...

CVE-2008-0919

CVE-2008-0919 affects OSSIM (Open Source Security Information Management) up to version 0.9.9 RC5, where the dest parameter of session/login.php is not sanitized. This XSS vulnerability allows an unauthenticated attacker to inject arbitrary HTML/JavaScript that could execute in the victim’s brows...

CVE-2008-0919

Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...

CVE-2008-0920

CVE-2008-0920 describes an SQL injection in OSSIM 0.9.9 rc5, specifically in port/modifyportform.php where the portname parameter is not adequately validated by a regex. This allows remote authenticated users to execute arbitrary SQL commands. The description details that the vulnerability affect...

CVE-2008-0920

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...

OSSIM Version Detection

Binary data 4397.prm...

SQL-injection, XSS in OSSIM (Open Source Security Information Management)

Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...

OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities

No description provided by source. Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail:...

OSSIM <= 0.9.9 RC5 Multiple Vulnerabilities

Binary data 4398.prm...

ossim-xss.txt

Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...

OSSIM Framework session/login.php dest Parameter XSS

The remote host is running OSSIM Open Source Security Information Management, a suite of security tools managed by a web-based front-end. The version of OSSIM installed on the remote host fails to sanitize user input to the 'dest' parameter of the 'session/login.php' script before using it to...

OSSIM 0.9.9rc5 - Cross-Site Scripting SQL Injection

OSSIM 0.9.9rc5 - Cross-Site Scripting SQL Injection Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin...

OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection

Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...