Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
pandora fms vulnerabilities and exploits
(subscribe to this query)
9
CVSSv2
CVE-2010-4278
operation/agentes/networkmap.php in Pandora FMS prior to 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.
Artica Pandora Fms 3.1
Artica Pandora Fms 3.0
Artica Pandora Fms 2.0
Artica Pandora Fms 2.1.1
Artica Pandora Fms 1.3.1
Artica Pandora Fms 1.3
Artica Pandora Fms 2.1
Artica Pandora Fms 1.2
Artica Pandora Fms
1 EDB exploit
10
CVSSv2
CVE-2010-4279
The default configuration of Pandora FMS 3.1 and previous versions specifies an empty string for the loginhash_pwd field, which allows remote malicious users to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conj...
Artica Pandora Fms 3.1
Artica Pandora Fms 3.0
Artica Pandora Fms 2.0
Artica Pandora Fms 2.1.1
Artica Pandora Fms 1.3.1
Artica Pandora Fms 1.3
Artica Pandora Fms 2.1
Artica Pandora Fms 1.2
Artica Pandora Fms
2 EDB exploits
7.5
CVSSv2
CVE-2010-4281
Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) chara...
Artica Pandora Fms 3.0
Artica Pandora Fms 3.1
Artica Pandora Fms
Artica Pandora Fms 2.0
Artica Pandora Fms 2.1
Artica Pandora Fms 2.1.1
Artica Pandora Fms 1.3
Artica Pandora Fms 1.3.1
Artica Pandora Fms 1.2
1 EDB exploit
7.5
CVSSv2
CVE-2010-4283
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code via a URL in the argv[1] parameter.
Artica Pandora Fms 3.0
Artica Pandora Fms 3.1
Artica Pandora Fms
Artica Pandora Fms 2.0
Artica Pandora Fms 2.1
Artica Pandora Fms 2.1.1
Artica Pandora Fms 1.3
Artica Pandora Fms 1.3.1
Artica Pandora Fms 1.2
1 EDB exploit
7.5
CVSSv2
CVE-2010-4280
Multiple SQL injection vulnerabilities in Pandora FMS prior to 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estad...
Artica Pandora Fms 3.0
Artica Pandora Fms 3.1
Artica Pandora Fms 2.0
Artica Pandora Fms 2.1.1
Artica Pandora Fms 1.3.1
Artica Pandora Fms 1.3
Artica Pandora Fms 2.1
Artica Pandora Fms 1.2
Artica Pandora Fms
2 EDB exploits
7.5
CVSSv2
CVE-2010-4282
Multiple directory traversal vulnerabilities in Pandora FMS prior to 3.1.1 allow remote malicious users to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote malicious users to inc...
Artica Pandora Fms 3.0
Artica Pandora Fms 3.1
Artica Pandora Fms
Artica Pandora Fms 2.0
Artica Pandora Fms 2.1
Artica Pandora Fms 2.1.1
Artica Pandora Fms 1.3
Artica Pandora Fms 1.3.1
Artica Pandora Fms 1.2
1 EDB exploit
NA
CVE-2023-44088
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 7...
Pandorafms Pandora Fms
NA
CVE-2023-44089
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). It was possible to execute malicious JS code on Visual Consoles. This issue affects Pandora FMS: from 700 up to an...
Pandorafms Pandora Fms
NA
CVE-2022-26308
Pandora FMS v7.0NG.760 and below allows an improper access control in Configuration (Credential store) where a user with the role of Operator (Write) could create, delete, view existing keys which are outside the intended role.
Pandorafms Pandora Fms
NA
CVE-2022-26309
Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation (User operation) resulting in elevation of privilege to Administrator group.
Pandorafms Pandora Fms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »