CVE-2013-1349
openSIS 4.5-5.2 - Remote Code Execution via ajax.php modname Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-1349.
PoCs published by Metasploit, EgiX, bcoles, including Metasploit module exploits/unix/webapp/opensis_modname_exec.
AI-analyzed exploit summary This Metasploit module exploits a PHP code execution vulnerability in OpenSIS (CVE-2013-1349) by leveraging an unsafe `eval()` call in `ajax.php` with user-controlled input from the `modname` parameter. It authenticates, injects base64-encoded payloads, and executes arbitrary commands via PHP functions like `system()` or `exec()`.
Description
Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.
Exploits (2)
This Metasploit module exploits a PHP code execution vulnerability in OpenSIS (CVE-2013-1349) by leveraging an unsafe `eval()` call in `ajax.php` with user-controlled input from the `modname` parameter. It authenticates, injects base64-encoded payloads, and executes arbitrary commands via PHP functions like `system()` or `exec()`.
This Metasploit module exploits a PHP code execution vulnerability in OpenSIS versions 4.5 to 5.2 by leveraging an unsafe `eval()` call in `ajax.php` with user-controlled input from the `modname` parameter. It authenticates as a user, then injects arbitrary PHP code to achieve remote command execution.