Skip to content
OpenAdvisories
High · 7.5 CVE-2023-44091 EUVD-2023-48450GHSA-m6h6-pgm9-rw33

Unauth Time-Based SQL Injection

Published Mar 19, 2024 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through <776.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – ≤ <776 —

References