Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Artica Pandora FMS networkmap.php文件操作系统命令注入漏洞
Vulnerability Description
Pandora FMS（Flexible Monitoring System）是Pandora FMS团队的一套监控系统。该系统通过可视化的方式监控网络、服务器、虚拟基础架构和应用程序等。 Pandora FMS 3.1.1之前版本中的operation/agentes/networkmap.php文件中存在操作系统命令注入漏洞。远程认证用户可以借助对index.php文件进行的operation/agentes/networkmap操作的layout参数中的shell元字符执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A