Pandora Fms < 3.1.1 - Directory Traversal Detection

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via 1 the page parameter to ajax.php or 2 the id parameter to general/pandorahelp.php, and allow remote attackers to include and execute, create, modify, or...

CVE-2010-4282

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via 1 the page parameter to ajax.php or 2 the id parameter to general/pandorahelp.php, and allow remote attackers to include and execute, create, modify, or...

CVE-2010-4278

Pandora FMS (versions up to 3.1.0 affected) contains an OS command injection in operation/agentes/networkmap.php. The vulnerability arises from the layout parameter in the networkmap action, which is not properly sanitized, allowing an authenticated remote user to inject shell commands via the la...

CVE-2010-4282: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via 1 the page parameter to ajax.php or 2 the id parameter to general/pandorahelp.php, and allow remote attackers to include and execute, create, modify, or...

PT-2010-5400

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 3.1.1 Description The issue allows remote attackers to include and execute arbitrary local files via specific parameters in various PHP files. This can be achieved through the "page" parameter to "ajax.php", the...

CVE-2010-4278: Improper Neutralization of Special Elements used in an OS Command

operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php...