CVE-2012-3835
AlienVault OSSIM 3.1 - Cross-Site Scripting via URL Parameter or Time Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3835. PoCs published by muts, Stefan Schurtz.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in AlienVault's 'top.php' and a blind SQL injection in 'base_qry_main.php' to extract the admin MD5 hash. It uses a binary search algorithm to efficiently enumerate the hash.
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to top.php or (2) time[0][0] parameter to forensics/base_qry_main.php, which is not properly handled in an error page.
Exploits (2)
This exploit demonstrates a reflected XSS vulnerability in AlienVault's 'top.php' and a blind SQL injection in 'base_qry_main.php' to extract the admin MD5 hash. It uses a binary search algorithm to efficiently enumerate the hash.
The exploit demonstrates SQL injection and XSS vulnerabilities in Alienvault OSSIM Open Source SIEM 3.1. It includes crafted URLs that exploit input validation flaws in the 'base_qry_main.php' and 'top.php' endpoints.