op5 Portal Detection

The remote web server hosts op5 Portal, a web interface platform that contains several other components produced by op5, notably op5 Monitor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57575; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

op5 Monitor Persistent Session Cookie

The remote web server has a version of op5 Monitor that improperly handles session cookies. The application sets an expiry date on cookies, causing logins to persist across sessions. Additionally, cookies are not reissued after login. Note that most versions affected by this vulnerability are als...

OP5 welcome Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OP5 welcome Remot...

OP5 license.php Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'OP5 license.php...

ITRS OP5 Monitor Detection (HTTP)

HTTP based detection of ITRS OP5 Monitor formerly op5 Monitor. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

op5 Monitor / Appliance < 5.5.3 Multiple RCE Vulnerabilities (Dec 2013)

op5 Monitor / Appliance is prone to multiple remote command execution RCE vulnerabilities because it fails to properly validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

OP5 license.php Remote Command Execution

This module exploits an arbitrary root command execution vulnerability in the OP5 Monitor license.php. Ekelow has confirmed that OP5 Monitor versions 5.3.5, 5.4.0, 5.4.2, 5.5.0, 5.5.1 are vulnerable. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2008-5028

Cross-site request forgery CSRF vulnerability in cmd.cgi in 1 Nagios 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests...

CVE-2008-5028

Cross-site request forgery CSRF vulnerability in cmd.cgi in 1 Nagios 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests...

CVE-2008-5027

The Nagios process in 1 Nagios before 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an a custom form or a b browser addon...

Authorization

The Nagios process in 1 Nagios before 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an a custom form or a b browser addon...

CVE-2008-5027

The Nagios process in 1 Nagios before 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an a custom form or a b browser addon...

CVE-2008-5028

Cross-site request forgery CSRF vulnerability in cmd.cgi in 1 Nagios 3.0.5 and 2 op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests...

CVE-2008-5028

CVE-2008-5028 is a CSRF in Nagios' cmd.cgi affecting Nagios 3.0.5 and op5 Monitor before 4.0.1. The vulnerability allows remote attackers to trigger commands in the Nagios process via unspecified HTTP requests, potentially enabling execution of arbitrary commands. Related advisories (Gentoo GLSA-...

CVE-2008-5027

CVE-2008-5027 affects Nagios: the Nagios process in Nagios (pre-3.0.5) and in op5 Monitor (pre-4.0.1) can bypass authorization for remote authenticated users, enabling execution of arbitrary programs via a custom form or a browser addon. Impact is described as remote code execution with partial c...