CVE-2020-11749

概要

参考情報

• medium.com/%40tehwinsam/multiple-xss-on-pandorafms-7-0-ng-744-64b244b8523c
• packetstormsecurity.com/files/158389/Pandora-FMS-7.0-NG-746-Script-Insertion-Code-Execution.htmlPoC · Exploit
• pandorafms.com/downloads/whats-new-747-EN.pdf · Release Notes
• exploit-db.com/exploits/48707 · Exploit

pandora fms のその他の脆弱性

• CVE-2025-34088高 8.8An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The net_tools.php functionality allows…
• CVE-2024-11320緊急 9.8Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue …
• CVE-2024-9987高 8.8A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issu…
• CVE-2024-35308高 8.8A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pand…
• CVE-2023-44089中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site S…