op5 Monitor is an open-source monitoring solution written in PHP.
**command_test.php** script in the Nacoma component of op5 Monitor can be used to execute arbitrary operating system commands.
Upgrade to op5 Monitor 7.2.0 or higher.
Exploit works on op5 Monitor 7.1.9 and requires valid credentials. (The default "monitor" account may be used.)