NetSight
IP …
critical9.0Public exploit code

CVE-2010-4278

operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the la…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.

Affected products

VendorProductAffected versions
ArticaPandora Fms
through 3.1
Versions 1.2, 1.3, 1.3.1, 2.0, 2.1

Weakness classification

CWE-78

References