CVE-2025-34115

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

op5 Monitor 'cmd_str' Parameter Remote Command Execution Vulnerability

OP5 Monitor is a set of open source network monitoring tools from the Swedish company OP5. A remote command execution vulnerability exists in the op5 Monitor 'cmdstr' parameter. An attacker could exploit this vulnerability to execute arbitrary commands in the affected context...