license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-12-31 12:55
Updated : 2014-01-02 08:24
NVD link : CVE-2012-0261
Mitre link : CVE-2012-0261
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
op5
- monitor
- system-portal