Pandora FMS 3.x - index.php Cross-Site Scripting

Pandora FMS 3.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49261/info Pandora FMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Pandora FMS 3.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49261/info Pandora FMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Pandora FMS 3.2.1 Cross Site Scripting

Exploit Title: Pandora FMS v3.2.1 Cross Site Scripting Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 8-08-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = 3.2.1 Description : affected parameter : searc...

CVE-2011-2132

CVE-2011-2132 affects Adobe Flash Media Server; vulnerable are Adobe FMS 3.x <= 3.5.6 and 4.x

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables...

CVE-2011-2283

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables...

CVE-2011-2283: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables...

CVE-2011-2283

CVE-2011-2283 affects Oracle PeopleSoft: PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13. Vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables. Root cause/vector details ...

PT-2011-3736

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FMS versions 9.0 Bundle 36 and 9.1 Bundle 13 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Payables. Recommendations For...

Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities

Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...

Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities

Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...

Pandora FMS (id_agent) - SQL Injection Vulnerability

Document Title: =============== Pandora FMS idagent - SQL Injection Vulnerability References Source: ==================== OSVDB-ID: 61222 http://osvdb.org/show/osvdb/61222 EDB-ID: 10570 http://www.exploit-db.com/exploits/10570/ PID: 84127...

Pandora FMS (id_agent) - SQL Injection Vulnerability

Document Title: =============== Pandora FMS idagent - SQL Injection Vulnerability References Source: ==================== OSVDB-ID: 61222 http://osvdb.org/show/osvdb/61222 EDB-ID: 10570 http://www.exploit-db.com/exploits/10570/ PID: 84127...

Pandora FMS 3.2.1 Cross Site Request Forgery

Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = Pandora XSRF exploit Click submit input...

Pandora Fms 3.2.1 - Cross-Site Request Forgery

Pandora Fms 3.2.1 - Cross-Site Request Forgery Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested...

Pandora FMS v3.2.1 Cross Site Request Forgery

Exploit for php platform in category web applications Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1...

Pandora Fms 3.2.1 - Cross-Site Request Forgery

Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = Pandora XSRF exploit Click submit input...

CVE-2011-0612

Adobe Flash Media Server (FMS) is affected by CVE-2011-0612: versions before 3.5.6 and 4.x before 4.0.2 are vulnerable to a remote denial-of-service via XML data corruption. The available sources describe the vulnerability and cite APSB11-11 as the mitigation/patch guidance from Adobe. The OpenVA...

Pandora FMS Console Default Credentials

It is possible to log into the remote Pandora FMS console by providing the default credentials admin / pandora. A remote attacker can exploit this to gain administrative control of the Pandora FMS installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2010-4279

The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhashpwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhashuser parameter, in conjunction with the md5 hash of "admin" in the...