1211 matches found
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13855
Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Repository Manager feature...
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13854
Artica Pandora FMS 7.44 allows privilege escalation...
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13854
Artica Pandora FMS 7.44 allows privilege escalation...
CVE-2020-13850
Artica Pandora FMS 7.44 has inadequate access controls on a web folder...
CVE-2020-13850
Artica Pandora FMS 7.44 has inadequate access controls on a web folder...
Privilege escalation
Artica Pandora FMS 7.44 allows privilege escalation...
Command injection
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
Design/Logic Flaw
Artica Pandora FMS 7.44 has inadequate access controls on a web folder...
Information disclosure
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13851
CVE-2020-13851 affects Artica Pandora FMS 7.44, enabling remote command execution via the Events feature. The underlying cause is a command-injection vulnerability in Events that could allow unauthenticated attackers to run arbitrary commands, potentially taking control of the Pandora FMS server ...
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13852
Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Manager feature...
CVE-2020-13852
Pandora FMS 7.44 is affected by CVE-2020-13852 due to a flaw in the File Manager that allows uploading a PHP web shell to a restricted directory, enabling remote command execution as the apache user. The accompanying advisory details multiple related vectors (_arbitrary file upload in File Manage...
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13853
Pandora FMS 7.44 is affected by CVE-2020-13853, a persistent Cross-Site Scripting (XSS) vulnerability in the Messages feature. The CoreLabs advisory details that an attacker can inject arbitrary JavaScript into messages, which is executed in the recipient’s browser and can facilitate session cook...