critical9.8

CVE-2024-35306

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables.

Impact

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: from 700 through <777.

Affected products

Vendor	Product	Affected versions
Artica	Pandora Fms	from 700 before 777

Weakness classification

CWE-78

References

NVD record
CVE.org record
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/