CVE-2020-8947: Improper Neutralization of Special Elements used in an OS Command

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

CVE-2019-20224

CVE-2019-20224 affects Pandora FMS 7.0NG’s netflow path: netflow_get_stats in functions_netflow.php allows remote authenticated users to inject commands via shell metacharacters in ip_src used by index.php?operation/netflow/nf_live_view. The issue arises from remote command execution vulnerabilit...

CVE-2019-20224: Improper Neutralization of Special Elements used in an OS Command

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...