4 matches found
PT-2013-5481
Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management OSSIM version 4.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved through various parameters in different PHP files, including the...
PT-2012-5030
Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management OSSIM version 3.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the time00 parameter in the forensics/base qry main.php...
PT-2012-5031
Name of the Vulnerable Software and Affected Versions AlienVault Open Source Security Information Management OSSIM version 3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the url parameter to "top.php" or the time00...
PT-2012-3016
Name of the Vulnerable Software and Affected Versions Basic Analysis and Security Engine BASE version 1.4.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in the base qry main.php file, specifically via the i...