Published: 02/12/2010 Updated: 10/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code via a URL in the argv[1] parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
artica pandora fms 3.0
artica pandora fms 3.1
artica pandora fms
artica pandora fms 2.0
artica pandora fms 2.1
artica pandora fms 2.1.1
artica pandora fms 1.3
artica pandora fms 1.3.1
artica pandora fms 1.2

[+] Introduction Pandora FMS (for Pandora Flexible Monitoring System) is a software solution for monitoring computer networks It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applications and hardware systems such as firewalls, proxies, databases, web servers or route ...

Pandora FMS versions 31 and below suffer from authentication bypass, os command injection, remote SQL injection, remote file inclusion and path traversal vulnerabilities ...

CWE-94 http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download http://www.exploit-db.com/exploits/15643 http://www.securityfocus.com/bid/45112 http://osvdb.org/69542 http://seclists.org/fulldisclosure/2010/Nov/326 http://secunia.com/advisories/42347 http://www.securityfocus.com/archive/1/514939/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/15643/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4283

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect