VDB
CVE-2013-5321
CVE-2013-5321
PUBLISHED
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.
EPSS 1.37% · 70.9th percentile
Risk Scores
EPSS Score
1.37%
70.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | ossim | 0, 2.9.0-1, 2.9.1-2 |
| Ubuntu:18.04:LTS | ossim | 0, 1.8.20.3+ds-5build1, 2.2.1-1 |
| Ubuntu:16.04:LTS | ossim | 0, 1.8.16-4ubuntu1 |
Timeline
- Aug 20, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
- Sep 13, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2013-5321 third-party-advisory
- http://www.exploit-db.com/exploits/26406 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2013-5321 third-party-advisory