CVE-2009-4375
EUVD-2009-434321.12.2009, 16:30
SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the id_document parameter.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| alienvault | open_source_security_information_management | 2.1.5 |
| alienvault | open_source_security_information_management | 2.1.5-1 |
| alienvault | open_source_security_information_management | 2.1.5-2 |
| alienvault | open_source_security_information_management | 2.1.5-3 |
𝑥
= Vulnerable software versions
References