CVEs-PoC/2020/CVE-2020-5841.md

CVE-2020-5841

Description

An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication.

POC

Reference

• https://medium.com/%40ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1
• https://medium.com/@ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1

Github

• https://github.com/phor3nsic/phor3nsic