CVE:CVE-2008-0920
CNNVD:CNNVD-200802-437
Open Source Security Information Management (OSSIM)的port/modifyportform.php中存在SQL注入漏洞。远程授权用户可以通过portname参数中一个没有很好地处理的表达式验证来执行任意SQL命令。
solution:Upgrade open_source_security_information_management os-sim to a higher version than *:rc5,and avoid the version *:rc5