CVE-2016-6913

概要

参考情報

• seclists.org/fulldisclosure/2016/Aug/122 · Exploit
• securityfocus.com/bid/92632 · VDB Entry
• alienvault.com/forums/discussion/7558 · Vendor Advisory

open source security information and event management のその他の脆弱性

• CVE-2016-8583中 6.1Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulnerable to reflected XSS.
• CVE-2016-8582緊急 9.8A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and r…
• CVE-2016-8581中 6.1A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an …
• CVE-2016-8580緊急 9.8PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow ar…