Mark Unwin

3 exploits Active since Apr 2020
CVE-2020-12078 WRITEUP HIGH WRITEUP
Open-AudIT 3.3.1 - OS Command Injection via Discovery Settings Exclude IP Parameter
An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address.
CVSS 8.8
CVE-2021-44916 WRITEUP MEDIUM WRITEUP
Open-AudIT < 4.2.0 - Cross-Site Scripting via URL Parameter
Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser.
CVSS 6.1
CVE-2021-40612 WRITEUP CRITICAL WRITEUP
Opmantek Open-AudIT <3.5.0 - Command Injection
An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.
CVSS 9.8