CVE-2012-3834
AlienVault Open Source Security Information Management 3.1 - Authenticated SQL Injection via time[0][0] Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3834. PoCs published by Stefan Schurtz.
AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in Alienvault OSSIM Open Source SIEM 3.1. It includes crafted URLs that exploit input validation flaws in the 'base_qry_main.php' and 'top.php' endpoints.
Description
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.
Exploits (2)
The exploit demonstrates SQL injection and XSS vulnerabilities in Alienvault OSSIM Open Source SIEM 3.1. It includes crafted URLs that exploit input validation flaws in the 'base_qry_main.php' and 'top.php' endpoints.
This Python script demonstrates a reflected XSS vulnerability in AlienVault's 'top.php' and a blind SQL injection in 'base_qry_main.php' to extract the admin MD5 hash. It uses a binary search algorithm to efficiently enumerate the hash.