CVE-2012-3835 Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url....
MediumCVSS 4.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault open source security information management | = 3.1 | No fix listed |
References
- 49005 third-party-advisory vendor-advisory
- www.darksecurity.de exploit
- 18800 exploit
- www.koramis.com exploit
- 53331 exploit vdb-entry
- alienvault-multiple-xss(75297) vdb-entry