OSVDB: Open Sourced Vulnerability Database

Creditee: Peter Österberg

Known Contact Information:

(as of 2011-12-29)

Known Affiliations:

Ekelow (as of 2011-12-29)

Disclosed Vulnerabilities (4):

Disc. Date	OSVDB ID	CVEID	Title
2011-12-29	78064	2012-0261	op5 Appliance system-portal Component license.php timestamp Parameter Remote Shell Command Execution
2011-12-29	78067	2012-0263	op5 Monitor Web Interface Error Message Credentials Disclosure
2011-12-29	78065	2012-0262	op5 Appliance system-op5config Component op5config/welcome password Parameter Remote Shell Command Execution
2011-12-29	78066	2012-0264	op5 Monitor Session Management Persistant Session Cookie Weakness

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.