CVE-2019-20224

CVE-2019-20224 affects Pandora FMS 7.0NG’s netflow path: netflow_get_stats in functions_netflow.php allows remote authenticated users to inject commands via shell metacharacters in ip_src used by index.php?operation/netflow/nf_live_view. The issue arises from remote command execution vulnerabilit...