pandorafms跨站脚本漏洞

"Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization.A stored cross-site scripting vulnerability exists in Pandora FMS 7.54 and earlier versions. An attacker could exploit this...

Pandora FMS 6.0SP3 Cross Site Scripting Vulnerability

Exploit Title: XSS vulnerability for keywords searching parameter in pandorafms-6.0SP3/pandoraconsole Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Vendor: https://pandorafms.com/ Link: https://github.com/pandorafms/pandorafms/releases CVE: 2021-0527-nu11secur1ty Proof:...

Pandora FMS 6.0SP3 Cross Site Scripting

Exploit Title: XSS vulnerability for keywords searching parameter in pandorafms-6.0SP3/pandoraconsole Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Date: 05.27.2021 Vendor: https://pandorafms.com/ Link: https://github.com/pandorafms/pandorafms/releases CVE: 2021-0527-nu11secur1ty...

Artica Pandora FMS SQL Injection Vulnerability (CNVD-2021-34345)

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An SQL injection vulnerability exists in Artica Pandora FMS version 742, which allows unauthenticated attackers to escalat...

Artica Pandora FMS Deserialization Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. Artica Pandora FMS version 742 suffers from a deserialization vulnerability that can be exploited by an attacker to perfor...

Artica Pandora FMS File Containment Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A remote file inclusion vulnerability exists in Artica Pandora FMS version 742, which can be exploited by a least privileg...

CVE-2021-32100

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

CVE-2021-32098

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

CVE-2021-32099

A SQL injection vulnerability in the pandoraconsole component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chartgenerator.php sessionid parameter, leading to a login bypass...

CVE-2021-32099

A SQL injection vulnerability in the pandoraconsole component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chartgenerator.php sessionid parameter, leading to a login bypass...

CVE-2021-32100

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

CVE-2021-32098

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

CVE-2021-32099

A SQL injection vulnerability in the pandoraconsole component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chartgenerator.php sessionid parameter, leading to a login bypass...

Remote file inclusion

A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user...

Deserialization of untrusted data

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

CVE-2021-32098

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

Sql injection

A SQL injection vulnerability in the pandoraconsole component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chartgenerator.php sessionid parameter, leading to a login bypass...

CVE-2021-32098

CVE-2021-32098 affects Artica Pandora FMS 742. Connected documents corroborate a deserialization vulnerability in Phar deserialization that allows unauthenticated access. The vulnerability details (affected version, root cause, impact) are consistently described across sources; no explicit fix or...

CVE-2021-32098

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

CVE-2021-32099

CVE-2021-32099 concerns Artica Pandora FMS 742, specifically the pandora_console component. A SQL injection in the /include/chart_generator.php endpoint via the session_id parameter enables an unauthenticated attacker to upgrade an unprivileged session, resulting in a login bypass. Multiple sourc...