Summary
op5 Monitor is prone to an HTML-injection vulnerability and an SQL-injection vulnerability because it fails to sanitize user- supplied input.
Exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, execute HTML and script code in the context of the affected site, steal cookie-based authentication credentials, or control how the site is rendered to the user
other attacks are
also possible.
op5 Monitor 5.4.2 is vulnerable
other versions may also be affected.
Solution
Vendor updates are available. Please see the references for more information.
References
Updated on 2015-03-25
