CVE-2012-3834

MEDIUM 6.5CVE-2012-3834 · Published 03/07/2012 · updated 16/06/2026

In short

CVE-2012-3834 is a MEDIUM (CVSS 6.5) vulnerability affecting open source security information management (alienvault).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
open source security information management alienvault	`= 3.1`	No fix yet

Description

SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OSSIM) 3.1 allows remote authenticated users to execute arbitrary SQL commands via the time[0][0] parameter.

References

secunia.com/advisories/49005 · Vendor Advisory
darksecurity.de/index.php · Exploit
exploit-db.com/exploits/18800 · Exploit
koramis.com/advisories/2012/KORAMIS-ADV2012-002.txt · Exploit
securityfocus.com/bid/53331 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/75290

More vulnerabilities in open source security information management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

open source security information management

alienvault

= 3.1

No fix yet

More vulnerabilities in open source security information management

See all →