CVE-2012-0261

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows...

10.0 HighPublic exploit

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

Exploit likelihood

73.9%Down 8.2 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2012-0261
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-94
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-0261
Updated: 2026-11-02

EUVDEUVD-2012-0297 No score

Record: EUVD-2012-0297
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v3fr-hqx7-jgff No score

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows...

Record: GHSA-v3fr-hqx7-jgff
Weakness: CWE-94
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 - 'license.php' Remote Command Execution (Metasploit)	2015-01-25
Metasploit	OP5 license.php Remote Command Execution	2012-01-05

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0261 is a high vulnerability (CVSS 10.0) in Op5 Monitor, published December 31, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 73.9%, the 99th percentile. No source names a fixed version.