Vulnerabilities

TI-2008-00884 CVE-2008-0920 · GHSA-26r4-c2j9-3fcx

SQL injection vulnerability in port/modifyportform.php in Open Source Security…

LOW 31

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, whic…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01008 Published 2008-02-22 No fix listed CWE-89

TI-2008-00883 CVE-2008-0919 · GHSA-8792-2rhw-hhh3

Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security…

LOW 26

Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest param…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03746 Published 2008-02-22 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in port/modifyportform.php in Open Source Security…

Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security…