CVE-2013-1349

Related Files

OpenSIS 'modname' PHP Code Execution

Posted Dec 23, 2013

Authored by EgiX | Site metasploit.com

This Metasploit module exploits a PHP code execution vulnerability in OpenSIS versions 4.5 to 5.2 which allows any authenticated user to execute arbitrary PHP code under the context of the web-server user. The 'ajax.php' file calls 'eval()' with user controlled data from the 'modname' parameter.

tags | exploit, web, arbitrary, php, code execution

advisories | CVE-2013-1349

SHA-256 | 7c1e06a8368ff3ba80da09ec39f138b29b87f7223b028687a6f1c5149cc3a95f

Download | Favorite | View

openSIS 5.2 PHP Code Injection

Posted Dec 7, 2013

Authored by EgiX

openSIS versions 4.5 through 5.2 suffer from a remote PHP code injection vulnerability.

tags | exploit, remote, php

advisories | CVE-2013-1349

SHA-256 | 42dccb85d42a4ca8903f8b7a25053348c82f5e5ee560bdeb03a693bb4e662dc7

Download | Favorite | View