Skip to content
OpenAdvisories

Vendor

Artica PFMS

27 known vulnerabilities.

Products

Pandora FMS 27
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2023-24517 Public exploit

    Remote Code Execution via Unrestricted File Upload

    Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 v…

    Artica PFMS Pandora FMS
  • Medium 6.1
    CVE-2022-45436 Public exploit

    Stored cross-site scripting vulnerability in network maps editor feature

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting (XSS). As a manager privilege user , create a network map containing name as xss p…

    Artica PFMS Pandora FMS pandora Ubuntu
  • Medium 6.4
    CVE-2022-47373 Public exploit

    Reflected Cross Site Scripting in Search Functionality of Module Library

    Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus resul…

    Artica PFMS Pandora FMS pandora Ubuntu
  • Medium 5.2
    CVE-2022-43980 Public exploit

    Cross-site scripting vulnerability in the network maps edit functionality

    There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An attacker could modify a network map, including on purpose the name of an XSS payload. Once created, if a user with admin privileges clicks o…

    Artica PFMS Pandora FMS