exploit/unix/webapp/opensis_chain_exec

weaponized

openSIS Unauthenticated PHP Code Execution

view exploit source metasploittype exploitpublished 2020-06-30catalog metasploit

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-13383US	high7.5	67.8% (99th)	Exploit	2020-07-01
openSIS through 7.4 allows Directory Traversal.
CVE-2020-13382US	critical9.1OT high	52.8% (99th)	Exploit	2020-07-01
openSIS through 7.4 has Incorrect Access Control.
CVE-2020-13381US	critical9.8	59.0% (99th)	Exploit	2020-07-01
openSIS through 7.4 allows SQL Injection.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.