CVE-2010-4278

Pandora FMS (versions up to 3.1.0 affected) contains an OS command injection in operation/agentes/networkmap.php. The vulnerability arises from the layout parameter in the networkmap action, which is not properly sanitized, allowing an authenticated remote user to inject shell commands via the la...