CVE-2013-5967

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute…

published October 9, 2013

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2) radar-iso27001-A12IS_acquisition-pot.php, (3) radar-iso27001-A11AccessControl-pot.php, (4) radar-iso27001-A10Com_OP_Mgnt-pot.php, or (5) radar-pci-potential.php in RadarReport/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19022 · 97.3th percentile
Published
2013-10-09T14:44Z
EPSS history
Timeline
  • 09 OCT 14:44Z
    Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute…
    cvelistv5