op5 Monitor license.php Remote Command Execution (CVE-2012-0261)

A command execution vulnerability has been reported in op5 Monitor. The vulnerability is due to an input validation flaw related to the system-op5config component. A remote attacker can exploit this vulnerability to execute arbitrary shell commands via command injection...

op5 Monitor < 6.1.3 Unspecified Information Disclosure Vulnerability

op5 Monitor is prone to an unspecified information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-6141

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization...

Authorization

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization...

CVE-2013-6141

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization...

CVE-2013-6141

CVE-2013-6141 affects op5 Monitor versions before 6.1.3, due to an unspecified information disclosure caused by lack of authorization, allowing attackers to read arbitrary files. Affected component: op5 Monitor. Impact: information disclosure with partial confidentiality impact. Exploitation vect...

PT-2014-3030

Name of the Vulnerable Software and Affected Versions op5 Monitor versions prior to 6.1.3 Description The issue is related to a lack of authorization, allowing attackers to read arbitrary files. Recommendations For versions prior to 6.1.3, update to version 6.1.3 or later to resolve the issue...

CVE-2013-6141: Undefined Security Weakness

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization...

CVE-2012-0262

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

CVE-2012-0263

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

CVE-2012-0264

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

Code injection

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

Design/Logic Flaw

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

DSquare Exploit Pack: D2SEC_OP5

Name| d2secop5 ---|--- CVE| CVE-2012-0261 Exploit Pack| D2ExploitPack Description| OP5 Monitor Remote Code Execution Vulnerability Notes|...

CVE-2012-0261

CVE-2012-0261 affects OP5 Monitor and OP5 Appliance: the license.php script in system-portal is vulnerable to remote command execution through shell metacharacters in the timestamp parameter of an install action. The validated root cause is improper input validation in license.php, leading to arb...

CVE-2012-0262

The op5 Monitor and op5 Appliance software are vulnerable to Remote Code Execution (RCE) in the op5config/welcome component (specifically in versions earlier than 2.0.3 for op5 Config and before 5.5.3 for Monitor/Appliance). The root cause is a failure to properly validate user-supplied input, al...

CVE-2012-0264

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

PT-2013-1487

Name of the Vulnerable Software and Affected Versions op5 Monitor versions prior to 1.6.2 op5 Appliance versions prior to 5.5.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action in the license.php...

PT-2013-1488

Name of the Vulnerable Software and Affected Versions op5 Monitor versions prior to 2.0.3 op5 Appliance versions prior to 5.5.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. This can be exploited in the...

PT-2013-1490

Name of the Vulnerable Software and Affected Versions op5 Monitor and op5 Appliance versions prior to 5.5.0 Description The issue is related to improper management of session cookies, which could allow remote attackers to have an unspecified impact. The exact vectors of the attack are not...