Skip to content
OpenAdvisories
High · 8.6 CVE-2024-9987 EUVD-2024-50266GHSA-rxqx-qqq2-7xfj

SQL Injection in CSV Module Data Collection

Published Oct 22, 2024 · Updated Oct 22, 2024 · Assigned by PandoraFMS

Description

A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issue affects Pandora FMS: from 700 through <777.3.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – < 777.3 777.3

References