op5 7.1.9 Remote Command Execution
Posted by deepcore on April 7, 2016 – 9:56 am
op5 has a cross site request forgery entry point that can be used to execute arbitrary remote commands on op5 system sent via HTTP GET requests, allowing attackers to completely takeover the affected host. To be victimized a user must be authenticated and visit a malicious webpage or click an infected link. Version 7.1.9 is affected.
Post a reply
You must be logged in to post a comment.