Skip to content
OpenAdvisories

Vendor

Artica ST

3 known vulnerabilities.

Products

Pandora FMS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2014-125124 Public exploit

    Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection

    An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023. The anyterm-module endpoint accepts unsanitized user input via the p parameter a…

    Artica ST Pandora FMS
  • Critical 10.0
    CVE-2014-125115 Public exploit

    Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

    An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user input in the loginhash_data parameter, allowing attackers to extract administrator credentials or a…

    Artica ST Pandora FMS