Exploit for Command Injection in Pandorafms Pandora_Fms

CVE-2024-11320 Explo...

CVE-2024-11320

Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through =777.4...

CVE-2024-11320

creationtimestamp| type| source ---|---|--- 2024-11-21 10:11:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113520403781165691 2024-12-01 12:59:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9279 2024-12-02 03:04:28+00:00| published-proof-of-concept|...

CVE-2024-11320 Command Injection leading to RCE via LDAP Misconfiguration

Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through =777.4...

CVE-2024-11320

CVE-2024-11320 affects Pandora FMS versions 700 through 777.4, where a misconfiguration in the LDAP authentication mechanism enables a command injection that can lead to remote code execution on the server. The Nuclei/NVD entries consistently describe arbitrary command execution via LDAP command ...