CVE-2020-26518

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...

CVE-2020-26518

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...

Sql injection

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...

CVE-2020-26518

Artica Pandora FMS prior to version 743 is affected by an unauthenticated SQL injection via the pandora_console/include/chart_generator.php session_id parameter. The CVE entry describes a high-severity vulnerability (CVSS v3.1: 9.8, CRITICAL; v2: 7.5, HIGH). Connected documents corroborate the af...

CVE-2020-26518

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandoraconsole/include/chartgenerator.php sessionid parameter...

CVE-2020-11749

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

CVE-2020-11749

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

Cross site scripting

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

CVE-2020-11749

Pandora FMS 7.0 NG = 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting XSS, which can run arbitrary code to allow Remote Code Execution as root or apache2...

CVE-2020-11749

Pandora FMS 7.0 NG up to build 746 is affected by multiple XSS vulnerabilities in different browser views. The underlying issue is cross‑site scripting triggered by actions such as scanning a SNMP device, which can result in remote code execution as root or apache2. Exploitation is described in m...

PT-2020-12822 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 7.0 NG through 746 Description: The issue concerns Multiple XSS vulnerabilities in different browser views of Pandora FMS. It can be triggered by a network administrator scanning a SNMP device, leading to Cross Site...

Pandora FMS 7.0 NG 7XX Remote Command Execution Exploit

This Metasploit module exploits a vulnerability CVE-2020-13851 in Pandora FMS versions 7.0 NG 742, 7.0 NG 743, and 7.0 NG 744 and perhaps older versions in order to execute arbitrary commands. This module takes advantage of a command injection vulnerability in th e Events feature of Pandora FMS...

Pandora FMS 7.0 NG 746 Script Insertion / Code Execution

Exploit Title: PandoraFMS 7.0 NG ≤ 746 Remote Code Execution Date: July 2020 Author: AppleBois Version: 7xx ≤ 746 Homepage: https://pandorafms.org/ Software Link: https://sourceforge.net/projects/pandora/files/Pandora FMS 7.0NG/ By asking network administrator to scan SNMP device to trigger Cross...

Pandora FMS 7.0 NG 7XX Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pandora FMS Events Remote Command Execution', 'Description' = %q This module exploits a vulnerability CVE-2020-13851 in Pandora FMS versions 7.0 ...

Pandora FMS Events Remote Command Execution

This module exploits a vulnerability CVE-2020-13851 in Pandora FMS versions 7.0 NG 742, 7.0 NG 743, and 7.0 NG 744 and perhaps older versions in order to execute arbitrary commands. This module takes advantage of a command injection vulnerability in the Events feature of Pandora FMS. This flaw...

Pandora FMS Remote Code Execution (CVE-2020-13851; CVE-2020-13852; CVE-2020-13855)

A remote code execution vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pandora FMS Persistent Cross-Site Scripting (CVE-2020-13853)

A persistent cross site scripting vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Artica Pandora FMS Information Disclosure Vulnerability (CNVD-2020-32912)

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS version 7.44, which stems from the program not having proper access...

Artica Pandora FMS Elevation of Privilege Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS version 7.44. An attacker can exploit the vulnerability to elevate...

Artica Pandora FMS Cross-Site Scripting Vulnerability (CNVD-2020-32915)

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A cross-site scripting vulnerability exists in the Messages feature in Artica Pandora FMS version 7.44. An attacker can...