CVE-2024-35306

Summary

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: from 700 through <777.

Affected Software

Weaknesses

• CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

• ←Previous
• Next→