CVE-2013-6141

CVE-2013-6141 affects op5 Monitor versions before 6.1.3, due to an unspecified information disclosure caused by lack of authorization, allowing attackers to read arbitrary files. Affected component: op5 Monitor. Impact: information disclosure with partial confidentiality impact. Exploitation vect...

CVE-2013-6141

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization...

CVE-2012-0264

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

CVE-2012-0262

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

CVE-2012-0263

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...

Design/Logic Flaw

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

Code injection

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...

DSquare Exploit Pack: D2SEC_OP5

Name| d2secop5 ---|--- CVE| CVE-2012-0261 Exploit Pack| D2ExploitPack Description| OP5 Monitor Remote Code Execution Vulnerability Notes|...

CVE-2012-0261

CVE-2012-0261 affects OP5 Monitor and OP5 Appliance: the license.php script in system-portal is vulnerable to remote command execution through shell metacharacters in the timestamp parameter of an install action. The validated root cause is improper input validation in license.php, leading to arb...

CVE-2012-0264

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...

CVE-2012-0262

CVE-2012-0262 affects OP5 Monitor and OP5 Appliance prior to version 5.5.3. The vulnerability arises on the welcome page (op5config/welcome) where remote, unauthenticated attackers can cause arbitrary command execution by submitting shell metacharacters in the password parameter. Impact is remote...

op5 Monitor < 6.1.0 Information Disclosure and Security Bypass Vulnerabilities

The version of op5 Monitor hosted on the remote web server is earlier than 6.1.0. It is, therefore, affected by the following information disclosure and security bypass vulnerabilities: - Log files can be accessed without authentication, which may contain sensitive information. Bug 6599 - A flaw...

op5 Monitor < 6.1.0 Multiple Vulnerabilities

op5 Monitor is prone to multiple information disclosure and security bypass vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

op5 Monitor < 5.7.3 Multiple Vulnerabilities

The version of op5 Monitor hosted on the remote web server is earlier than 5.7.3. It is, therefore, affected by the following vulnerabilities: - The 'status/hostgroupgrid' script fails to properly sanitize user-supplied input to the 'itemsperpage' parameter, which could allow for a SQL injection...

op5 Monitor < 5.4.2, 5.5.x <= 5.7.3 Unspecified SQLi Vulnerability

op5 Monitor is prone to an unspecified SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

op5 Monitor <= 5.4.2 Multiple Vulnerabilities

op5 Monitor is prone to an HTML injection vulnerability and an SQL injection SQLi vulnerability because it fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

OP5 Monitor 5.5 license.php RCE

Remote command execution vulnerability in OP5 Monitor license.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

OP5 Monitor 5.5 RCE

Remote root command execution vulnerability in OP5 Monitor Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

op5 Monitor Credential Leak

The version of op5 Monitor hosted on the remote web server contains an information disclosure vulnerability. In the default configuration, detailed error messages are enabled. An authenticated user, upon triggering an error, will be presented with sensitive data including database credentials, th...

op5 Monitor Detection

The remote web server hosts op5 Monitor, a proprietary web interface for Nagios. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57577; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"op5 Monitor Detection"; scriptsummaryenglish:"Looks for the...