CVE-2012-0261 license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an...
HighCVSS 10.0
EPSS 73.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| op5 monitor | <= 5.5.1 | No fix listed |
| op5 monitor | = 5.3.5 | No fix listed |
| op5 monitor | = 5.4.0 | No fix listed |
| op5 monitor | = 5.4.2 | No fix listed |
| op5 monitor | = 5.5.0 | No fix listed |
| op5 system-portal | <= 1.6.1 | No fix listed |
References
- 20120107 OP5 Monitor - Multiple Vulnerabilities mailing-list
- 47417 third-party-advisory vendor-advisory
- www.ekelow.se
- www.op5.com
- 78064 vdb-entry
- bugs.op5.com