NVD

Id
50640  
Name
CVE-2009-3439  
Description
Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpolicy.php; the name parameter to (5) host/newhostgroupform.php and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-28  
Modified Date
2009-09-29  
Seq
2009-3439  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255990 50640 CVE-2009-3439 http://dsecrg.com/pages/vul/show.php?id=155  View
255991 50640 CVE-2009-3439 20090923 [DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities  View
255992 50640 CVE-2009-3439 36504  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42783 JVNDB-2009-003790 OSSIM における SQL インジェクションの脆弱性 Open Source Security Information Management (OSSIM) には、SQL インジェクションの脆弱性が存在します。 CVE-2009-3439 40870 CVE-2009-3439 50640 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003790.html 2009-09-28 2012-06-26 View