CVE-2017-15935

Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2017-10-27

Last modified

2024-08-05

Weaknesses

CWE-94

Affected products

• Pandora Fms (Artica)

References

• https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d