CVE-2019-20224 PoC — Artica Pandora FMS 操作系统命令注入漏洞

Source

https://github.com/mhaskar/CVE-2019-20224

Associated Vulnerability

Title: Artica Pandora FMS 操作系统命令注入漏洞 (CVE-2019-20224)
Description:netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request. This issue has been fixed in Pandora FMS 7.0 NG 742.

Description

The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224

Readme

# CVE-2019-20224
The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →