Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2010-4278

operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.

  • Published: Dec 2, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-4278
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
artica / pandora_fms 1.3-beta2 1.3-beta2.x
artica / pandora_fms 1.3-beta 1.3-beta.x
artica / pandora_fms 1.2 1.2.x
artica / pandora_fms 2.1.1 2.1.1.x
artica / pandora_fms 1.3-beta3 1.3-beta3.x
artica / pandora_fms - 3.1.x
artica / pandora_fms 1.3-beta1 1.3-beta1.x
artica / pandora_fms 3.0-rc1 3.0-rc1.x
artica / pandora_fms 2.0 2.0.x
artica / pandora_fms 1.3 1.3.x
artica / pandora_fms 2.0-beta 2.0-beta.x
artica / pandora_fms 3.0-rc2 3.0-rc2.x
artica / pandora_fms 1.3.1 1.3.1.x
artica / pandora_fms 2.1 2.1.x
artica / pandora_fms 3.0 3.0.x
artica / pandora_fms 3.1-rc1 3.1-rc1.x