Pandora FMS 'index.php' Cross Site Scripting Vulnerability

Pandora FMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker t...

Pandora FMS 3.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49261/info Pandora FMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Pandora FMS 3.x - index.php Cross-Site Scripting

Pandora FMS 3.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49261/info Pandora FMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Pandora FMS 3.2.1 Cross Site Scripting

Exploit Title: Pandora FMS v3.2.1 Cross Site Scripting Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 8-08-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = 3.2.1 Description : affected parameter : searc...

CVE-2011-2132

CVE-2011-2132 affects Adobe Flash Media Server; vulnerable are Adobe FMS 3.x <= 3.5.6 and 4.x

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables...

CVE-2011-2283

CVE-2011-2283 affects Oracle PeopleSoft: PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle #36 and 9.1 Bundle #13. Vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables. Root cause/vector details ...

CVE-2011-2283

Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Products 9.0 Bundle 36 and 9.1 Bundle 13 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Payables...

Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities

Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...

Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities

Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...

Pandora FMS (id_agent) - SQL Injection Vulnerability

Document Title: =============== Pandora FMS idagent - SQL Injection Vulnerability References Source: ==================== OSVDB-ID: 61222 http://osvdb.org/show/osvdb/61222 EDB-ID: 10570 http://www.exploit-db.com/exploits/10570/ PID: 84127...

Pandora FMS (id_agent) - SQL Injection Vulnerability

Document Title: =============== Pandora FMS idagent - SQL Injection Vulnerability References Source: ==================== OSVDB-ID: 61222 http://osvdb.org/show/osvdb/61222 EDB-ID: 10570 http://www.exploit-db.com/exploits/10570/ PID: 84127...

Pandora FMS 3.2.1 Cross Site Request Forgery

Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = Pandora XSRF exploit Click submit input...

Pandora Fms 3.2.1 - Cross-Site Request Forgery

Pandora Fms 3.2.1 - Cross-Site Request Forgery Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested...

Pandora FMS v3.2.1 Cross Site Request Forgery

Exploit for php platform in category web applications Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1...

Pandora Fms 3.2.1 - Cross-Site Request Forgery

Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = Pandora XSRF exploit Click submit input...

CVE-2011-0612

Adobe Flash Media Server (FMS) is affected by CVE-2011-0612: versions before 3.5.6 and 4.x before 4.0.2 are vulnerable to a remote denial-of-service via XML data corruption. The available sources describe the vulnerability and cite APSB11-11 as the mitigation/patch guidance from Adobe. The OpenVA...

Pandora FMS Console Default Credentials

It is possible to log into the remote Pandora FMS console by providing the default credentials admin / pandora. A remote attacker can exploit this to gain administrative control of the Pandora FMS installation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Design/Logic Flaw

Incomplete blacklist vulnerability in the safeurlextraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : colon character...

Directory traversal

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via 1 the page parameter to ajax.php or 2 the id parameter to general/pandorahelp.php, and allow remote attackers to include and execute, create, modify, or...