Artica Pandora FMS 漏洞列表

Artica Pandora FMS 7.44 allows remote command execution via the events feature.

Artica Pandora FMS through 7.42 is susceptible to arbitrary file read. An attacker can read the chat history, which is in JSON format and contains user names, user IDs, private messages, and timestamps. This can potentially lead to unauthorized data modification and other operations.

Artica Pandora FMS 7.44 allows remote command execution via the events feature.

Artica Pandora FMS through 7.42 is susceptible to arbitrary file read. An attacker can read the chat history, which is in JSON format and contains user names, user IDs, private messages, and timestamps. This can potentially lead to unauthorized data modification and other operations.

Artica Pandora FMS是西班牙Artica公司的一套监控系统，在 Artica Pandora FMS 到 7.42中，未经身份验证的攻击者可以读取聊天记录。该文件采用 JSON 格式，包含用户名、用户 ID、私人消息和时间戳。

PandoraFMS是美国pandorafms的一个应用软件。提供一个监控功能。 PandoraFMS 存在安全漏洞，该漏洞源于PandoraFMS <=7.54允许任意文件上传。攻击者可利用该漏洞通过文件管理器远程执行命令。