CVE-2023-44090

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through 776...

CVE-2023-41793 Path Traversal and Untrusted Upload File

: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 through 776...

CVE-2023-41793

CVE-2023-41793 is a path traversal vulnerability in Pandora FMS affecting versions 700 through 776. The issue allows an attacker to change directories, create files, and download them outside the permitted directories, potentially enabling writing arbitrary files and enabling a later chain to rem...

CVE-2023-44092 OS Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through 776...

CVE-2023-44092

CVE-2023-44092 affects Pandora FMS versions 700 through

CVE-2023-44092 OS Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through 776...

CVE-2023-44091

Pandora FMS is affected by CVE-2023-44091 through versions 700–776. The vulnerability is an SQL Injection caused by improper neutralization of special elements in SQL commands, enabling injections even when authentication is not successful. PTSecurity reports this vulnerability as part of a chain...

CVE-2023-44091 Unauth Time-Based SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through 776...

CVE-2023-44091 Unauth Time-Based SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through 776...

CVE-2023-44090 UnautH SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through 776...

CVE-2023-44090 UnautH SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through 776...

CVE-2023-44090

Summary: Pandora FMS versions 700–776 are affected by an SQL Injection flaw tied to the Grafana module, caused by improper neutralization of SQL elements. The vulnerability enables unauthorized modification of multiple files in the Grafana component. Impact (as stated): potential risk to data and...

Artica Pandora FMS Path Traversal Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A path traversal vulnerability exists in Artica Pandora FMS versions 700 through 776 that could allow an attacker to chang...

Artica Pandora FMS SQL Injection Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An SQL injection vulnerability exists in Artica Pandora FMS versions 700 through 776, which arises from an improper...

Artica Pandora FMS Security Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS versions 700 to 776, which arises from an improper neutralization of...

Artica Pandora FMS SQL Injection Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An SQL injection vulnerability exists in Artica Pandora FMS versions 700 through 776, which arises from an improper...

PT-2024-2985 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 775 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows an attacker to perform SQL injections even if...

PT-2024-14: Path Traversal and Untrusted Upload File in Pandora FMS

The vulnerability was identified in Pandora FMS, versions from 700 through 776. The vulnerability allows to modify directories, create and upload files outside of authorized directories. The vulnerability is a part of a chain that leads to remote code execution and complete server compromise...

PT-2024-15: Unauth Time-based SQL Injection in Pandora FMS

The vulnerability was identified in Pandora FMS, versions from 700 through 776. The vulnerability can be exploited without authentication. It allows to gain access to arbitrary data from database. The vulnerability is a part of a chain that leads to remote code execution and complete server...

PT-2024-16: OS Command Injection in Pandora FMS

The vulnerability was identified in Pandora FMS, versions from 700 through 776. The vulnerability allows an attacker to inject a command into the operating system. The vulnerability is a part of a chain that leads to remote code execution and complete server compromise PT-ID-2024-15,...