1067 matches found
Artica Pandora FMS Code Issue Vulnerability (CNVD-2020-32914)
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A code issue vulnerability exists in the File Manager feature in Artica Pandora FMS version 7.44. An attacker can exploit...
CVE-2020-13855
Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Repository Manager feature...
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13854
Artica Pandora FMS 7.44 allows privilege escalation...
CVE-2020-13852
Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Manager feature...
CVE-2020-13853
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13854
Artica Pandora FMS 7.44 allows privilege escalation...
CVE-2020-13850
Artica Pandora FMS 7.44 has inadequate access controls on a web folder...
CVE-2020-13850
Artica Pandora FMS 7.44 has inadequate access controls on a web folder...
Design/Logic Flaw
Artica Pandora FMS 7.44 has inadequate access controls on a web folder...
Privilege escalation
Artica Pandora FMS 7.44 allows privilege escalation...
Command injection
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
Information disclosure
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature...
CVE-2020-13851
CVE-2020-13851 affects Artica Pandora FMS 7.44, enabling remote command execution via the Events feature. The underlying cause is a command-injection vulnerability in Events that could allow unauthenticated attackers to run arbitrary commands, potentially taking control of the Pandora FMS server ...
CVE-2020-13851
Artica Pandora FMS 7.44 allows remote command execution via the events feature...
CVE-2020-13852
Pandora FMS 7.44 is affected by CVE-2020-13852 due to a flaw in the File Manager that allows uploading a PHP web shell to a restricted directory, enabling remote command execution as the apache user. The accompanying advisory details multiple related vectors (_arbitrary file upload in File Manage...