CVEvulnerability

CVE-2012-0261

10.0 HIGH Published 2013-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

Affected configurations

• op5 monitor (<= 5.5.1) • op5 monitor 5.3.5 • op5 monitor 5.4.0 • op5 monitor 5.4.2 • op5 monitor 5.5.0 • op5 system-portal (<= 1.6.1)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References