Lucene search

K
cve[email protected]CVE-2013-1349
HistoryDec 09, 2013 - 4:36 p.m.

CVE-2013-1349

2013-12-0916:36:00
CWE-94
web.nvd.nist.gov
52
cve-2013-1349
eval injection
ajax.php
opensis
remote attack
arbitrary code execution
nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.717 High

EPSS

Percentile

98.1%

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.717 High

EPSS

Percentile

98.1%