EDB-15643
PoCPandora Fms 3.1 - Directory Traversal / Local File Inclusion
view exploit source exploit_dbtype webappsauthor Juan Galiana Larapublished 2010-11-30catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-4283US | high7.5 | Exploit | ||
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parame… | ||||
| CVE-2010-4282US | high7.5 | Exploit | ||
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php… | ||||
| CVE-2010-4281US | high7.5 | Exploit | ||
Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan