CVE

Id
65268  
CVE No.
CVE-2013-5321  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.  
Phase
Assigned (20130820)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
638351 65268 CVE-2013-5321 EXPLOIT-DB:26406  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23499 JVNDB-2013-005074 Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 Adobe ColdFusion には、CFIDE ディレクトリが有効な場合、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-5326 65268 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005074.html  View