NetSight
IP …
high7.5Public exploit code

CVE-2010-4283

PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter.

Affected products

VendorProductAffected versions
ArticaPandora Fms
through 3.1
Versions 1.2, 1.3, 1.3.1, 2.0, 2.1

Weakness classification

CWE-94

References