CVE-2024-11320 PoC — Pandora FMS 命令注入漏洞

Source

https://github.com/mhaskar/CVE-2024-11320

Associated Vulnerability

Title:Pandora FMS 命令注入漏洞 (CVE-2024-11320)
Description:Pandora FMS是美国Pandora FMS公司的一套监控系统。该系统通过可视化的方式监控网络、服务器、虚拟基础架构和应用程序等。 Pandora FMS 700至777.4版本存在命令注入漏洞，该漏洞源于通过 LDAP 配置错误导致命令注入和远程代码执行。

Description

Exploit for Pandora FMS Remote Code Execution CVE-2024-11320

Readme

# CVE-2024-11320
Exploit for Pandora FMS Remote Code Execution CVE-2024-11320

![Pandora Exploit](pandora-poc.png)

File Snapshot


 [4.0K]  /data/pocs/481fcaebf6757da0e1fbd56a1a100065bdf2ff2f
├── [4.7K]  pandora-exploit.py
├── [299K]  pandora-poc.png
└── [ 115]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!