100 matches found
CVE-2012-0262
The op5 Monitor and op5 Appliance software are vulnerable to Remote Code Execution (RCE) in the op5config/welcome component (specifically in versions earlier than 2.0.3 for op5 Config and before 5.5.3 for Monitor/Appliance). The root cause is a failure to properly validate user-supplied input, al...
CVE-2012-0264
CVE-2012-0264 affects op5 Monitor and op5 Appliance prior to version 5.5.0. The root cause is improper management of session cookies, which yields a remote impact with an unspecified vector and unspecified consequences (per the description). The NVD metrics indicate a high severity (CVSS 2.0: bas...
CVE-2012-0261
CVE-2012-0261 affects OP5 Monitor and OP5 Appliance: the license.php script in system-portal is vulnerable to remote command execution through shell metacharacters in the timestamp parameter of an install action. The validated root cause is improper input validation in license.php, leading to arb...
CVE-2012-0263: Exposure of Sensitive Information to an Unauthorized Actor
monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by 1 a malformed hoststatustypes parameter to status/service/all or 2 a crafted request to...
CVE-2012-0264: Undefined Security Weakness
op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors...
CVE-2012-0261: Improper Control of Generation of Code
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action...
CVE-2012-0262: Improper Control of Generation of Code
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter...
OP5 welcome Remote Command Execution (CVE-2012-0262)
An arbitrary commands execution vulnerability has been reported in OP5 appliances...
op5 Monitor < 6.1.0 Information Disclosure and Security Bypass Vulnerabilities
The version of op5 Monitor hosted on the remote web server is earlier than 6.1.0. It is, therefore, affected by the following information disclosure and security bypass vulnerabilities: - Log files can be accessed without authentication, which may contain sensitive information. Bug 6599 - A flaw...
op5 Monitor < 6.1.0 Multiple Vulnerabilities
op5 Monitor is prone to multiple information disclosure and security bypass vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...
op5 Monitor < 5.7.3 Multiple Vulnerabilities
The version of op5 Monitor hosted on the remote web server is earlier than 5.7.3. It is, therefore, affected by the following vulnerabilities: - The 'status/hostgroupgrid' script fails to properly sanitize user-supplied input to the 'itemsperpage' parameter, which could allow for a SQL injection...
op5 Monitor < 5.4.2, 5.5.x <= 5.7.3 Unspecified SQLi Vulnerability
op5 Monitor is prone to an unspecified SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
op5 Monitor <= 5.4.2 Multiple Vulnerabilities
op5 Monitor is prone to an HTML injection vulnerability and an SQL injection SQLi vulnerability because it fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
op5 Monitoring v5.4.2 (VM Applicance) Multiple Vulnerabilities
Exploit for php platform in category web applications Author: loneferret of Offensive Security Product: op5 Monitoring VM appliance Version: 5.4.2 Vendor Site: http://www.op5.com/ Software Download: http://www.op5.com/get-op5-monitor/get-started/ Software Description: op5 is a market leading...
op5 Monitoring 5.4.2 - VM Applicance Multiple Vulnerabilities
Author: loneferret of Offensive Security Product: op5 Monitoring VM appliance Version: 5.4.2 Vendor Site: http://www.op5.com/ Software Download: http://www.op5.com/get-op5-monitor/get-started/ Software Description: op5 is a market leading developer of Open Source Management solutions. op5 develop...
op5 Monitoring 5.4.2 - VM Applicance Multiple Vulnerabilities
op5 Monitoring 5.4.2 - VM Applicance Multiple Vulnerabilities Author: loneferret of Offensive Security Product: op5 Monitoring VM appliance Version: 5.4.2 Vendor Site: http://www.op5.com/ Software Download: http://www.op5.com/get-op5-monitor/get-started/ Software Description: op5 is a market...
OP5 Monitor 5.5 RCE
Remote root command execution vulnerability in OP5 Monitor Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
OP5 Monitor 5.5 license.php RCE
Remote command execution vulnerability in OP5 Monitor license.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
op5 Monitor Persistent Session Cookie
The remote web server has a version of op5 Monitor that improperly handles session cookies. The application sets an expiry date on cookies, causing logins to persist across sessions. Additionally, cookies are not reissued after login. Note that most versions affected by this vulnerability are als...
op5 Monitor Detection
The remote web server hosts op5 Monitor, a proprietary web interface for Nagios. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57577; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"op5 Monitor Detection"; scriptsummaryenglish:"Looks for the...