Test ID:	1.3.6.1.4.1.25623.1.0.804293
Category:	Web application abuses
Title:	AlienVault OSSIM <= 4.3.1 SQLi / RCE Vulnerabilities - Active Check
Summary:	AlienVault OSSIM is prone to multiple SQL injection (SQLi) and; remote code execution (RCE) vulnerabilities.
Description:	Summary: AlienVault OSSIM is prone to multiple SQL injection (SQLi) and remote code execution (RCE) vulnerabilities. Vulnerability Insight: Multiple flaws are due to improper sanitization of user-supplied input via 'date_from' and 'date_to' GET parameter passed to graph_geoloc.php script. Vulnerability Impact: Successful exploitation will allow remote attackers to inject or manipulate SQL queries in the back-end database, allowing for execution of arbitrary code. Affected Software/OS: AlienVault Open Source Security Information Management (OSSIM) version 4.3.1 and prior. Solution: Update to version 4.3.2 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.