Secunia Security Advisory – Some vulnerabilities have been reported in OSSIM, which can be exploited by malicious users to conduct SQL injection attacks, and by malicious people to disclose potentially sensitive information and conduct cross-site scripting attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81630/sa36867.txt
Source: https://packetstormsecurity.com/files/81630/Secunia-Security-Advisory-36867.html