PT-2013-3102

CVE-2013-1349

·

Published

2013-12-09

·

Updated

2020-09-03

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions openSIS versions 4.5 through 5.2
Description The issue allows remote attackers to execute arbitrary PHP code via the modname parameter in the "ajax.php" file.
Recommendations For openSIS versions 4.5 through 5.2, consider restricting access to the modname parameter in the "ajax.php" file until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2013-1349
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com