CVE-2010-4282
published 2010-12-02CVE-2010-4282: Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page…
PriorityP354high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
19.50%
97.0th percentile
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artica | pandora_fms | <= 3.1 | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
| artica | pandora_fms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
exploitdb·2010-11-30·CVSS 7.5
CVE-2010-4283 [HIGH] Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
---
[+] Introduction
Pandora FMS (for Pandora Flexible Monitoring System) is a software
solution for monitoring computer networks. It allows monitoring in a
visual way the status and performance of several parameters from
different operating systems, servers, applications and hardware systems
such as firewalls, proxies, databases, web servers or routers.
It can be deployed in almost any operating system. It features remote
monitoring (WMI, SNMP, TCP. UDP, ICMP, HTTP...) and it can also use
agents. An agent is available for each platform. It can also monitor
hardware systems with a TCP/IP stack, such as load balancers, routers,
network switches, printers or firewalls.
This software has several servers that process and get inf
Nuclei
phpShowtime 2.0 - Directory Traversal
nuclei·CVSS 7.5
CVE-2010-4282 [HIGH] phpShowtime 2.0 - Directory Traversal
phpShowtime 2.0 - Directory Traversal
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.
Template:
id: CVE-2010-4282
info:
name: phpShowtime 2.0 - Directory Traversal
author: daffainfo
severity: high
description: Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and
http://osvdb.org/69543http://osvdb.org/69544http://osvdb.org/69545http://seclists.org/fulldisclosure/2010/Nov/326http://secunia.com/advisories/42347http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/downloadhttp://www.exploit-db.com/exploits/15643http://www.securityfocus.com/archive/1/514939/100/0/threadedhttp://www.securityfocus.com/bid/45112http://osvdb.org/69543http://osvdb.org/69544http://osvdb.org/69545http://seclists.org/fulldisclosure/2010/Nov/326http://secunia.com/advisories/42347http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/downloadhttp://www.exploit-db.com/exploits/15643http://www.securityfocus.com/archive/1/514939/100/0/threadedhttp://www.securityfocus.com/bid/45112
2010-12-02
Published