Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-44090 EUVD-2023-48449GHSA-q8mf-j7cw-h829

UnautH SQL Injection

Published Mar 19, 2024 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through <776.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – ≤ <776 —

References