CVE:CVE-2012-3834
CNNVD:CNNVD-201205-092
AlienVault Open Source Security Information Management (OSSIM) 3.1版本中的forensics/base_qry_main.php中存在SQL注入漏洞。远程认证用户可利用该漏洞通过time[0][0]参数执行任意SQL命令。
solution:Upgrade alienvault open_source_security_information_management to a higher version than 3.1,and avoid the version 3.1