critical9.8
CVE-2021-34074
PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager.
Impact
PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pandorafms | Pandora Fms | through 754 |