| Package | Affected versions | Patched versions |
|---|---|---|
| pandora fms | = 7.42 |
Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated user should create a new folder with a "tricky" name in the filemanager. The exploit works when the php-fileinfo extension is disabled on the host system. The attacker must include shell metacharacters in the content type.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free