vendor:
Opsview
by:
J. Oquendo
7,5
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: Opsview
Affected Version From: pre 4.4.1
Affected Version To: pre 4.4.1
Patch Exists: YES
Related CWE: CVE-2013-5694
CPE: a:opsview:opsview
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2013
Blind SQL Injection in Ops View
A Blind SQL injection vulnerability exists in OpsView 'acknowledge' function. A malicious user can post bad data leading to a database dump, user creation, code execution, etc.
Mitigation:
Opsview released a fix with Opsview 4.4.1
