{"uuid": "e5334aa4-e868-4b47-bd9e-325efadd32e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-5383", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/alienvault_newpolicyform_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Chris Hebert \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"AlienVault 4.6.1 and below is susceptible to an authenticated SQL injection attack against\\n          newpolicyform.php, using the 'insertinto' parameter. This module exploits the vulnerability\\n          to read an arbitrary file from the file system. Any authenticated user is able to exploit\\n          this, as administrator privileges are not required.\", \"disclosure_date\": \"2014-05-09\", \"fullname\": \"auxiliary/gather/alienvault_newpolicyform_sqli\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"AlienVault Authenticated SQL Injection Arbitrary File Read\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/alienvault_newpolicyform_sqli.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/alienvault_newpolicyform_sqli\", \"references\": [\"CVE-2014-5383\", \"OSVDB-106815\", \"EDB-33317\", \"URL-http://forums.alienvault.com/discussion/2690/security-advisories-v4-6-1-and-lower\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:11.455928Z"}