Pandora FMS Remote Code Execution Vulnerability

PandoraFMS is an open source application , used to monitor a variety of Web site activities , it can receive real-time monitoring reports , and sent to your designated mailbox , you can also send via e-mail , SMS . Pandora FMS suffers from a remote code execution vulnerability that can be exploit...

CVE-2019-20224

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

Design/Logic Flaw

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

CVE-2019-20224

CVE-2019-20224 affects Pandora FMS 7.0NG’s netflow path: netflow_get_stats in functions_netflow.php allows remote authenticated users to inject commands via shell metacharacters in ip_src used by index.php?operation/netflow/nf_live_view. The issue arises from remote command execution vulnerabilit...

CVE-2019-20224

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

Artica Pandora FMS Command Execution Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A remote code execution vulnerability exists in version 7.x of Artica Pandora FMS. An attacker could exploit the...

CVE-2019-19681

Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual...

CVE-2019-19681

Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual...

Remote code execution

DISPUTED Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an...

CVE-2019-19681

Pandora FMS 7.x is reported to have a remote code execution vulnerability (CVE-2019-19681) that can be triggered by an authenticated user who can modify the alert system, allowing execution of commands as root/Administrator. The Red Hat entry and other sources reiterate the issue and include vend...

CVE-2019-19681

Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE: The product vendor states that the vulnerability as it is described is not in fact an actual...

PT-2019-15906 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 7.x Description: The issue allows for remote code execution with an authenticated user who has the ability to modify the alert system, potentially enabling the execution of commands as root or Administrator. It is noted...

CVE-2019-13035

Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS the current directory a...

Privilege escalation

Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS the current directory a...

CVE-2019-13035

CVE-2019-13035 affects Artica Pandora FMS 7.0 NG before 735. The underlying issue is improper permissions on C:\PandoraFMS and sub-folders, enabling standard users to create files, combined with the Apache service httpd.exe potentially executing cmd.exe from C:\PandoraFMS as NT AUTHORITY\SYSTEM o...

CVE-2019-13035

Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS the current directory a...

fms-ag.ch XSS vulnerability

Open Bug Bounty ID: OBB-697689 Description| Value ---|--- Affected Website:| fms-ag.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Artica Pandora FMS Information Disclosure Vulnerability (CNVD-2018-23787)

Artica Pandora FMS Flexible Monitoring System is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS. The vulnerability can be exploited to ca...

Artica Pandora FMS Cross-Site Scripting Vulnerability (CNVD-2018-14363)

Artica Pandora FMS Flexible Monitoring System is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A cross-site scripting vulnerability exists in Artica Pandora FMS versions prior to 7.0 NG 723....

CVE-2018-11223

XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandoraconsole/index.php?sec=estado&sec2=operation/agentes/estadoagente&refr=" call...