EDB-20062

functional

Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor mutspublished 2012-07-23catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-2599US	—	—	Exploit	2020-02-20
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3835. Reason: This issue was MERGED into CVE-2012-3835 in accordance with CVE content decisions, because it…
CVE-2012-3835US	medium4.3	2.23% (83rd)	Exploit	2012-07-03
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or H…
CVE-2012-3834US	medium6.5	1.44% (73rd)	Exploit	2012-07-03
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitr…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.