CVE-2016-8582

This exploit demonstrates a SQL injection vulnerability in Alienvault OSSIM/USM <=5.3.1 via the 'value' parameter in gauge.php. It allows blind SQLi or file-based exfiltration of data, such as password hashes, by leveraging serialized input and MySQL's INTO OUTFILE function.

This Metasploit module exploits a chain of vulnerabilities in AlienVault OSSIM/USM, including object injection, authentication bypass, and SQL injection, to achieve unauthenticated remote code execution as root. It hijacks an admin session, creates a rogue action with a Python payload, and triggers it via a failed SSH login attempt.