high7.2Public exploit code
CVE-2020-5844
index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)2022-06-14 · webapps · php
Impact
index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742_FIX_PERL2020.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artica | Pandora Fms | Version 7.0_ng |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167503/Pandora-FMS-7.0NG.742-Remote-Code-Execution.html
- https://github.com/TheCyberGeek/CVE-2020-5844
- https://pandorafms.com
- http://packetstormsecurity.com/files/167503/Pandora-FMS-7.0NG.742-Remote-Code-Execution.html
- https://github.com/TheCyberGeek/CVE-2020-5844
- https://pandorafms.com