Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-1349 Details

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://karmainsecurity.com/KIS-2013-10	CVE	Exploit
http://secunia.com/advisories/55913	CVE	Vendor Advisory
http://sourceforge.net/p/opensis-ce/bugs/59/	CVE	Exploit
http://sourceforge.net/p/opensis-ce/code/1009	CVE	ExploitPatch
http://karmainsecurity.com/KIS-2013-10	[email protected]	Exploit
http://secunia.com/advisories/55913	[email protected]	Vendor Advisory
http://sourceforge.net/p/opensis-ce/bugs/59/	[email protected]	Exploit
http://sourceforge.net/p/opensis-ce/code/1009	[email protected]	ExploitPatch

CWE-ID	CWE Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection')	[email protected]

Product	Versions
os4ed opensis	4.5 4.6 4.7 4.8 4.8.1
CPE cpe:2.3:a:os4ed:opensis:4.5:::::::* cpe:2.3:a:os4ed:opensis:4.6:::::::* cpe:2.3:a:os4ed:opensis:4.7:::::::* cpe:2.3:a:os4ed:opensis:4.8:::::::* cpe:2.3:a:os4ed:opensis:4.8.1:::::::* cpe:2.3:a:os4ed:opensis:4.9:::::::* cpe:2.3:a:os4ed:opensis:5.0:::::::* cpe:2.3:a:os4ed:opensis:5.1:::::::* cpe:2.3:a:os4ed:opensis:5.2:::::::* Remediation No remediation found in references.

Product

Versions

os4ed opensis

4.5

4.6

4.7

4.8

4.8.1

14 change records found show changes

QUICK INFO