CVE-2013-1349

CVE-2013-1349 describes an eval injection vulnerability in ajax.php within openSIS versions 4.5 through 5.2, allowing remote attackers to execute arbitrary PHP code. This critical vulnerability has a CVSS score of 7.5, indicating a high severity due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available via a Metasploit module, though there is no evidence of active exploitation or significant community discussion.