CVE-2013-5694

Opsview < 4.4.1 - SQL Injection via service_selection Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-5694. PoCs published by J. Oquendo.

AI-analyzed exploit summary This is a writeup describing a Blind SQL Injection vulnerability in Opsview's 'acknowledge' function. It includes details on the vulnerable endpoint and payload structure but does not contain executable exploit code.

Description

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the service_selection parameter.

Exploits (1)

exploitdb WRITEUP

by J. Oquendo · textwebappsphp

https://www.exploit-db.com/exploits/29326

View Code ZIP pw:eip

This is a writeup describing a Blind SQL Injection vulnerability in Opsview's 'acknowledge' function. It includes details on the vulnerable endpoint and payload structure but does not contain executable exploit code.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Moderate

Reliability

Theoretical

Target: Opsview pre 4.4.1

No auth needed

Prerequisites: Access to the Opsview web interface · Network connectivity to the target

MITRE ATT&CK