Lucene search
K

CVE-2019-20224

🗓️ 09 Jan 2020 15:37:58Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 89 Views🌐 WEB

CVE-2019-20224 netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src paramete

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Pandora 7.0NG - Remote Code Execution Exploit
11 Jan 202000:00
zdt
Circl
CVE-2019-20224
18 Jan 202013:24
circl
CNVD
Pandora FMS Remote Code Execution Vulnerability
13 Jan 202000:00
cnvd
Check Point Advisories
Pandora FMS Command Injection (CVE-2019-20224)
26 Jan 202000:00
checkpoint_advisories
Cvelist
CVE-2019-20224
9 Jan 202015:37
cvelist
Exploit DB
Pandora 7.0NG - Remote Code Execution
10 Jan 202000:00
exploitdb
exploitpack
Pandora 7.0NG - Remote Code Execution
10 Jan 202000:00
exploitpack
Nuclei
Pandora FMS 7.0NG - Remote Command Injection
4 Jun 202603:48
nuclei
NVD
CVE-2019-20224
9 Jan 202016:15
nvd
OSV
CVE-2019-20224
9 Jan 202016:15
osv
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
nickrequest bodypandora_console/index.php?login=1Remote authenticated code execution via crafted login flow? (not the vulnerability described)CWE-78
passrequest bodypandora_console/index.php?login=1Remote authenticated code execution via crafted login flow? (not the vulnerability described)CWE-78
login_buttonrequest bodypandora_console/index.php?login=1Remote authenticated code execution via crafted login flow? (not the vulnerability described)CWE-78
ip_srcrequest bodypandora_console/index.php?sec=netf&sec2=operation/netflow/nf_live_view&pure=0Remote Code Execution via shell metacharacters in ip_src parameter to nf_live_view endpointCWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:38Current
7.9High risk
Vulners AI Score7.9
CVSS 3.18.8
CVSS 29
EPSS0.93613
89