exploit/linux/http/pandora_fms_auth_rce_cve_2024_12971

weaponized

Pandora FMS authenticated command injection leading to RCE via chromium_path or phantomjs_bin

view exploit source metasploittype exploitpublished 2025-03-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-12971US	high8.8	61.5% (99th)	Exploit	2025-03-17
Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.