CVE-2010-4282 | BDVDB-2026-44183 Detail
Description#
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://osvdb.org/69545
- http://secunia.com/advisories/42347
- http://www.securityfocus.com/archive/1/514939/100/0/threaded
- http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download
- http://osvdb.org/69543
- http://www.securityfocus.com/bid/45112
- http://osvdb.org/69544
- http://seclists.org/fulldisclosure/2010/Nov/326
- http://www.exploit-db.com/exploits/15643
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.