artica pandora fms 2.1 vulnerabilities and exploits

(subscribe to this query)

operation/agentes/networkmap.php in Pandora FMS prior to 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.

Artica Pandora Fms 3.1 Artica Pandora Fms 3.0 Artica Pandora Fms 2.0 Artica Pandora Fms 2.1.1 Artica Pandora Fms 1.3.1 Artica Pandora Fms 1.3 Artica Pandora Fms 2.1 Artica Pandora Fms 1.2 Artica Pandora Fms

1 EDB exploit

Multiple directory traversal vulnerabilities in Pandora FMS prior to 3.1.1 allow remote malicious users to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote malicious users to inc...

Artica Pandora Fms 3.0 Artica Pandora Fms 3.1 Artica Pandora Fms Artica Pandora Fms 2.0 Artica Pandora Fms 2.1 Artica Pandora Fms 2.1.1 Artica Pandora Fms 1.3 Artica Pandora Fms 1.3.1 Artica Pandora Fms 1.2

1 EDB exploit

The default configuration of Pandora FMS 3.1 and previous versions specifies an empty string for the loginhash_pwd field, which allows remote malicious users to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conj...

Artica Pandora Fms 3.1 Artica Pandora Fms 3.0 Artica Pandora Fms 2.0 Artica Pandora Fms 2.1.1 Artica Pandora Fms 1.3.1 Artica Pandora Fms 1.3 Artica Pandora Fms 2.1 Artica Pandora Fms 1.2 Artica Pandora Fms

2 EDB exploits

Multiple SQL injection vulnerabilities in Pandora FMS prior to 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estad...

Artica Pandora Fms 3.0 Artica Pandora Fms 3.1 Artica Pandora Fms 2.0 Artica Pandora Fms 2.1.1 Artica Pandora Fms 1.3.1 Artica Pandora Fms 1.3 Artica Pandora Fms 2.1 Artica Pandora Fms 1.2 Artica Pandora Fms

2 EDB exploits

Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) chara...

Artica Pandora Fms 3.0 Artica Pandora Fms 3.1 Artica Pandora Fms Artica Pandora Fms 2.0 Artica Pandora Fms 2.1 Artica Pandora Fms 2.1.1 Artica Pandora Fms 1.3 Artica Pandora Fms 1.3.1 Artica Pandora Fms 1.2

1 EDB exploit

PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code via a URL in the argv[1] parameter.

Artica Pandora Fms 3.0 Artica Pandora Fms 3.1 Artica Pandora Fms Artica Pandora Fms 2.0 Artica Pandora Fms 2.1 Artica Pandora Fms 2.1.1 Artica Pandora Fms 1.3 Artica Pandora Fms 1.3.1 Artica Pandora Fms 1.2

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook