CVE-2013-1349
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 23%
from disclosure to weapon15 days
Published on NVDDec 9
1st PoC+15d
metasploitDec 4
exploitation probability
23%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/30471unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.