Description
PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests.
Unscored
CVE-2021-34074
EUVD-2021-20744GHSA-7v73-wqmq-pqv5
PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protect…
Published Jun 25, 2021 · Updated Aug 4, 2024 · Assigned by mitre