CVE-2013-5321: Alienvault Open Source Security Information Management

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a Query action to forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4] parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5) port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or (7) rvalue parameter in a search action to vulnmeter/index.php.

Affected products

• Alienvault Open Source Security Information Management: version 4.1 only

Published 2013-08-20. Last modified 2026-06-16.