382 matches found
OSSIM 2.1 SQL Injection and xss
No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...
[DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities
OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...
OSSIM 2.1 - SQL Injection / Cross-Site Scripting
OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...
OSSIM Server Detection
A OSSIM server is listening on the remote system. Description : The remote system is running an OSSIM server. OSSIM Open Source Security Information Management is a centralized security management information system. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be...
Sql injection
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
CVE-2008-0919
Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...
CVE-2008-0920
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
CVE-2008-0919
CVE-2008-0919 affects OSSIM (Open Source Security Information Management) up to version 0.9.9 RC5, where the dest parameter of session/login.php is not sanitized. This XSS vulnerability allows an unauthenticated attacker to inject arbitrary HTML/JavaScript that could execute in the victim’s brows...
CVE-2008-0920
CVE-2008-0920 describes an SQL injection in OSSIM 0.9.9 rc5, specifically in port/modifyportform.php where the portname parameter is not adequately validated by a regex. This allows remote authenticated users to execute arbitrary SQL commands. The description details that the vulnerability affect...
CVE-2008-0919
Cross-site scripting XSS vulnerability in session/login.php in Open Source Security Information Management OSSIM 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter...
CVE-2008-0920
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...
OSSIM <= 0.9.9 RC5 Multiple Vulnerabilities
Binary data 4398.prm...
OSSIM Framework session/login.php dest Parameter XSS
The remote host is running OSSIM Open Source Security Information Management, a suite of security tools managed by a web-based front-end. The version of OSSIM installed on the remote host fails to sanitize user input to the 'dest' parameter of the 'session/login.php' script before using it to...
ossim-xss.txt
Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...
OSSIM Version Detection
Binary data 4397.prm...
OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities
No description provided by source. Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail:...
SQL-injection, XSS in OSSIM (Open Source Security Information Management)
Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...
OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== OSSIM 0.9.9rc5 XSS/SQL Injection Multiple Remote Vulnerabilities ================================================================== Application: OSSIM http://www.ossim.net...
OSSIM 0.9.9rc5 - Cross-Site Scripting SQL Injection
OSSIM 0.9.9rc5 - Cross-Site Scripting SQL Injection Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin...