← Return to the roomGITHUB ↗

ARCHIVED FIELD NOTES / CVES

CVE-2020-5844

POC · CVEs

An original archive entry. Its publication date and source document are preserved.

More CVEs files →

ORIGINAL RESEARCH DESTINATION

Pandora FMS 7.0 NG

Authenticated file upload and code execution

The proof of concept examines Pandora FMS’s administrator file repository. An uploaded PHP file can be executed through the application, turning administrative web access into code execution on the server.

The original site linked this entry to an external publication. The source below contains the research or proof of concept.

Published on github.com.