OSSIM (repository_attachment.php) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================================== OSSIM repositoryattachment.php Arbitrary File Upload Vulnerability ===================================================================== Vulnerable: OSSIM os-sim 2.1.5...

Sql injection

SQL injection vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the iddocument parameter...

CVE-2009-4375

The CVE-2009-4375 issue affects AlienVault OSSIM 2.1.5 (and possibly earlier builds before 2.1.5-4). A SQL injection vulnerability in repository/repository_attachment.php allows remote attackers to execute arbitrary SQL commands through the id_document parameter. References and vendor entries (Re...

CVE-2009-4374: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. dot dot in the iddocument paramet...

CVE-2009-4375: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the iddocument parameter...

CVE-2009-4373: Undefined Security Weakness

Unrestricted file upload vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then...