CVE-2008-0920

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression.

Date published : 2008-02-22

http://www.securityfocus.com/bid/27927

http://www.securityfocus.com/archive/1/488450/100/0/threaded