Pandora FMS 7.0 NG 723 any version

Command Injection leading to RCE via LDAP Misconfiguration

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests.

Path Traversal leading to Local File Inclusion

Authentication bypass in password reset process

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2.

Pandora FMS Authenticated Remote Code Execution via Ping Module

Vulnerability: Authenticated SQL Injection in API

SQL Injection in Visual Console

Improper Authorization in User Management to Vertical Privilege Escalation

Post-auth Arbitrary File Read in the Server Plugins Section

SQL Injection in CSV Module Data Collection

Cross-Site Request en Bulk operation (User operation)

Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS (the current directory) as NT AUTHORITY\SYSTEM upon web requests to the portal. This will effectively allow non-privileged users to escalate privileges to NT AUTHORITY\SYSTEM.

Stored cross-site scripting vulnerability in create event section

XSS in File manager

Relative Path Traversal to Remote Code Execution in File Manager

Remote Code Execution via Unrestricted File Upload

Disabling the administrator's account through cross-site request forgery

Stored Cross Site Scripting in syslog section

Server side request forgery in api checker

Reflected Cross Site Scripting in Search Functionality of Module Library

Stored Cross Site Scripting Vulnerability in Visual Console Module

Vulnerability XSS in Transaction Map name field

Vulnerability XSS in service elements

Vulnerability XSS in Event filter name field

Vulnerability XSS in service form name field

Vulnerability XSS in module form name field

User notification settings edition

XSS Vulnerability Messages

XSS in Visual Console

Stored Cross Site Scripting - Special Days Module

Limited Authentication bypass due to hardcoded secret

PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed.

Improper Access Control in Configuration (Credential store)

Cross-site scripting vulnerability in the network maps edit functionality

Stored Cross Site-Scripting in File Manager

Stored Cross Site-Scripting in Agent Manager