Sql injection

2023-12-2912:15:00

PRIOn knowledge base

www.prio-n.com

improper neutralization

special elements

sql command

vulnerability

pandora fms

arbitrary

execution

low privileges

nvd

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmsle774

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	le	774

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/