CVE

Id
57077  
CVE No.
CVE-2012-3834  
Status
Candidate  
Description
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.  
Phase
Assigned (20120703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590292 57077 CVE-2012-3834 EXPLOIT-DB:18800  View
590293 57077 CVE-2012-3834 URL:http://www.exploit-db.com/exploits/18800  View
590294 57077 CVE-2012-3834 MISC:http://www.darksecurity.de/index.php?/211-KORAMIS-ADV2012-002-Alienvault-OSSIM-Open-Source-SIEM-3.1-Multiple-security-vulnerabilities.html  View
590295 57077 CVE-2012-3834 MISC:http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt  View
590296 57077 CVE-2012-3834 BID:53331  View
590297 57077 CVE-2012-3834 URL:http://www.securityfocus.com/bid/53331  View
590298 57077 CVE-2012-3834 SECUNIA:49005  View
590299 57077 CVE-2012-3834 URL:http://secunia.com/advisories/49005  View
590300 57077 CVE-2012-3834 XF:alienvault-baseqrymain-sql-injection(75290)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27292 JVNDB-2012-002999 MyClientBase の application/core/MY_Model.php における SQL インジェクションの脆弱性 MyClientBase の application/core/MY_Model.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-3839 57077 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002999.html  View