EUVD-2012-0300

Malware in sbrugna...

VulnCheck KEV: CVE-2012-0262

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

CVE-2012-0263

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

CVE-2012-0262

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

Code injection

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

Design/Logic Flaw

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

CVE-2012-0262

The op5 Monitor and op5 Appliance software are vulnerable to Remote Code Execution (RCE) in the op5config/welcome component (specifically in versions earlier than 2.0.3 for op5 Config and before 5.5.3 for Monitor/Appliance). The root cause is a failure to properly validate user-supplied input, al...

CVE-2012-0261

CVE-2012-0261 affects OP5 Monitor and OP5 Appliance: the license.php script in system-portal is vulnerable to remote command execution through shell metacharacters in the timestamp parameter of an install action. The validated root cause is improper input validation in license.php, leading to arb...

CVE-2012-0261: Improper Control of Generation of Code

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action...

PT-2013-1489

Name of the Vulnerable Software and Affected Versions op5 Monitor and op5 Appliance versions prior to 5.5.1 Description The issue allows remote authenticated users to obtain sensitive information, such as database and user credentials, via error messages triggered by specific actions. This can be...

PT-2013-1490

Name of the Vulnerable Software and Affected Versions op5 Monitor and op5 Appliance versions prior to 5.5.0 Description The issue is related to improper management of session cookies, which could allow remote attackers to have an unspecified impact. The exact vectors of the attack are not...

PT-2013-1488

Name of the Vulnerable Software and Affected Versions op5 Monitor versions prior to 2.0.3 op5 Appliance versions prior to 5.5.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. This can be exploited in the...

PT-2013-1487

Name of the Vulnerable Software and Affected Versions op5 Monitor versions prior to 1.6.2 op5 Appliance versions prior to 5.5.3 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action in the license.php...

CVE-2012-0264: Undefined Security Weakness

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

CVE-2012-0263: Exposure of Sensitive Information to an Unauthorized Actor

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

CVE-2012-0262: Improper Control of Generation of Code

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...