Skip to content
OpenAdvisories
High · 8.7 CVE-2024-35306 EUVD-2024-35277GHSA-8f4h-35jg-wp7g

OS Command injection in Ajax PHP files through HTTP Request

Published Jun 10, 2024 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Description

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: from 700 through <777.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – < 777 777

References