Open Source Security Information Management: >> Os-Sim Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and earlier allows remote attackers to inject arbitrary web script or HTML via the dest parameter.
CVSS Score
4.3
EPSS Score
0.072
Published
2008-02-22
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression.
CVSS Score
6.5
EPSS Score
0.007
Published
2008-02-22