Published: 12/02/2020 Updated: 14/02/2020

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

functions_netflow.php in Artica Pandora FMS 7.0 allows remote malicious users to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view ip_dst, dst_port, or src_port parameter, a different vulnerability than CVE-2019-20224.

Vulnerable Product	Search on Vulmon	Subscribe to Product
artica pandora fms 7.0

Pandora FMS version 70 suffers from an authenticated remote code execution vulnerability ...

ZeroDay exploits that i have shared. #CentreonExploit #rConfigExploit #PandoraFMSExploit

Public Exploits ZeroDay exploits that i have shared CVE-2020-13252 Centreon <= 191015 Authenticated RCE Exploit-DB link: wwwexploit-dbcom/exploits/48256 Advisory link: engindemirbilekgithubio/centreon-1910-rce CVE-2020-10221 rConfig 393 Authenticated RCE Exploit-DB link: wwwexploit-dbcom/exploits/48207 Advisory link: engindemi

CWE-78 https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/pandorafms-rce.html https://engindemirbilek.github.io/pandorafms-rce http://packetstormsecurity.com/files/156326/Pandora-FMS-7.0-Authenticated-Remote-Code-Execution.html https://nvd.nist.gov https://github.com/EnginDemirbilek/PublicExploits https://packetstormsecurity.com/files/156326/Pandora-FMS-7.0-Authenticated-Remote-Code-Execution.html

CVE-2020-8947

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect