NVD

Id
40651  
Name
CVE-2013-5321  
Description
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-20  
Modified Date
2013-08-21  
Seq
2013-5321  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205874 40651 CVE-2013-5321 26406  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22234 JVNDB-2013-003809 AlienVault Open Source Security Information Management における SQL インジェクションの脆弱性 AlienVault Open Source Security Information Management (OSSIM) には、SQL インジェクションの脆弱性が存在します。 CVE-2013-5321 65263 CVE-2013-5321 40651 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003809.html 2013-08-20 2013-08-22 View