vendor:
AlienVault OSSIM
by:
Unknown
7.5
CVSS
HIGH
Reflected XSS, Blind SQL Injection
79
CWE
Product Name: AlienVault OSSIM
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Unknown
2012
Reflected XSS and Blind SQL Injection in AlienVault
The AlienVault application is vulnerable to a reflected XSS attack in the 'url' parameter of 'top.php'. An attacker can entice a logged-in user to visit a malicious URL and hijack their session. Additionally, there is a blind SQL injection vulnerability in the 'tcp_port' parameter of 'base_qry_main.php' that allows an attacker to extract the admin hash. The vulnerability was reported to CERT on 28 May 2012 and publicly disclosed on 23 Jul 2012.
Mitigation:
To mitigate the reflected XSS vulnerability, proper input validation and output encoding should be implemented. To mitigate the blind SQL injection vulnerability, prepared statements or parameterized queries should be used to prevent SQL injection attacks.
