CVE-2013-1349: Code Injection
Published Dec 9, 2013
·Updated
Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.
Affected Software
9 affected components
OS4ED openSIS=4.5
OS4ED openSIS=4.6
OS4ED openSIS=4.7
OS4ED openSIS=4.8
OS4ED openSIS=4.8.1
OS4ED openSIS=4.9
OS4ED openSIS=5.0
OS4ED openSIS=5.1
OS4ED openSIS=5.2
Remediation
Patch Available
Event History
Dec 9, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1349?
CVE-2013-1349 is considered a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2013-1349?
To fix CVE-2013-1349, you should upgrade your openSIS installation to version 5.3 or later.
3
What are the affected versions in CVE-2013-1349?
CVE-2013-1349 affects openSIS versions 4.5 through 5.2.
4
Who is affected by CVE-2013-1349?
Any organization using the vulnerable versions of openSIS is at risk of exploitation via CVE-2013-1349.
5
What type of vulnerability is CVE-2013-1349?
CVE-2013-1349 is an eval injection vulnerability that enables execution of arbitrary PHP code.