Published: 09/12/2013 Updated: 03/09/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Eval injection vulnerability in ajax.php in openSIS 4.5 up to and including 5.2 allows remote malicious users to execute arbitrary PHP code via the modname parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
os4ed opensis 4.6
os4ed opensis 4.5
os4ed opensis 4.8.1
os4ed opensis 4.7
os4ed opensis 5.2
os4ed opensis 5.1
os4ed opensis 5.0
os4ed opensis 4.9
os4ed opensis 4.8

## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initialize(info={}) super(update_info(info, 'Name' ...

openSIS versions 45 through 52 suffer from a remote PHP code injection vulnerability ...

CWE-94 http://sourceforge.net/p/opensis-ce/code/1009 http://karmainsecurity.com/KIS-2013-10 http://sourceforge.net/p/opensis-ce/bugs/59/http://secunia.com/advisories/55913 https://nvd.nist.gov https://www.exploit-db.com/exploits/30471/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-1349

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect