CVE-2016-8582

CRITICAL

AlienVault OSSIM & USM <5.3.2 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2016-8582. PoCs published by Peter Lapp, Peter Lapp, Mehmet Ince <[email protected]>, including Metasploit module exploits/linux/http/alienvault_exec.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Alienvault OSSIM/USM <=5.3.1 via the 'value' parameter in gauge.php. It allows blind SQLi or file-based exfiltration of data, such as password hashes, by leveraging serialized input and MySQL's INTO OUTFILE function.

Description

A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Peter Lapp · textwebappsphp
https://www.exploit-db.com/exploits/40684

This exploit demonstrates a SQL injection vulnerability in Alienvault OSSIM/USM <=5.3.1 via the 'value' parameter in gauge.php. It allows blind SQLi or file-based exfiltration of data, such as password hashes, by leveraging serialized input and MySQL's INTO OUTFILE function.

Classification
Working Poc 100%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Alienvault OSSIM/USM <=5.3.1
Auth required
Prerequisites: Authentication credentials · Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
by Peter Lapp, Mehmet Ince <[email protected]> · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/alienvault_exec.rb

This Metasploit module exploits a chain of vulnerabilities in AlienVault OSSIM/USM, including object injection, authentication bypass, and SQL injection, to achieve unauthenticated remote code execution as root. It hijacks an admin session, creates a rogue action with a Python payload, and triggers it via a failed SSH login attempt.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: AlienVault OSSIM/USM <= 5.3.0
No auth needed
Prerequisites: Network access to the target · SSH service exposed on the target · Active admin session in the sessions table
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/40684/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93866

Scores

CVSS v3 9.8
EPSS 0.8055
EPSS Percentile 99.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (2)
alienvault/open_source_security_information_and_event_management < 5.3.1
alienvault/unified_security_management < 5.3.1
Published Oct 28, 2016
Tracked Since Feb 18, 2026