Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_server or (6) targets parameter to vulnmeter/simulate.php.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://forums.alienvault.com/discussion/1609/patch-release-4-3-1 - | |
| References | () http://packetstormsecurity.com/files/122547/Alienvault-OSSIM-Cross-Site-Scripting.html - | |
| References | () http://secunia.com/advisories/54264 - Vendor Advisory | |
| References | () http://secunia.com/advisories/54287 - Vendor Advisory | |
| References | () http://www.osvdb.org/show/osvdb/95813 - | |
| References | () http://www.osvdb.org/show/osvdb/95814 - | |
| References | () http://www.osvdb.org/show/osvdb/95816 - | |
| References | () http://www.osvdb.org/show/osvdb/95817 - | |
| References | () http://www.osvdb.org/show/osvdb/95818 - | |
| References | () http://www.securityfocus.com/bid/61456 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/85994 - |
Information
Published : 2013-08-15 20:55
Updated : 2024-11-21 01:57
NVD link : CVE-2013-5300
Mitre link : CVE-2013-5300
CVE.ORG link : CVE-2013-5300
JSON object : View
Products Affected
alienvault
- open_source_security_information_management
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')