CVE-2010-4281
Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) character.
Vulnerabilidad de lista negra incompleta en la función safe_url_extraclean en ajax.php en Pandora FMS anterior a v3.1.1 permite a atacantes remotos ejecutar código PHP arbitrario mediante un parámetro de página que contiene una ruta de acceso compartido UNC, que evita la verificación para el carácter : (dos puntos)
Pandora FMS versions 3.1 and below suffer from authentication bypass, os command injection, remote SQL injection, remote file inclusion and path traversal vulnerabilities.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-11-17 CVE Reserved
- 2010-11-30 First Exploit
- 2010-12-01 CVE Published
- 2024-06-12 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/69546 | Vdb Entry | |
| http://seclists.org/fulldisclosure/2010/Nov/326 | Mailing List |
|
| http://secunia.com/advisories/42347 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/514939/100/0/threaded | Mailing List |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/15643 | 2010-11-30 | |
| http://www.exploit-db.com/exploits/15643 | 2024-08-07 | |
| http://www.securityfocus.com/bid/45112 | 2024-08-07 |
| URL | Date | SRC |
|---|---|---|
| http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download | 2018-10-10 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | <= 3.1 Search vendor "Artica" for product "Pandora Fms" and version " <= 3.1" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.2 Search vendor "Artica" for product "Pandora Fms" and version "1.2" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.3 Search vendor "Artica" for product "Pandora Fms" and version "1.3" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.3 Search vendor "Artica" for product "Pandora Fms" and version "1.3" | beta |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.3 Search vendor "Artica" for product "Pandora Fms" and version "1.3" | beta1 |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.3 Search vendor "Artica" for product "Pandora Fms" and version "1.3" | beta2 |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.3 Search vendor "Artica" for product "Pandora Fms" and version "1.3" | beta3 |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 1.3.1 Search vendor "Artica" for product "Pandora Fms" and version "1.3.1" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 2.0 Search vendor "Artica" for product "Pandora Fms" and version "2.0" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 2.0 Search vendor "Artica" for product "Pandora Fms" and version "2.0" | beta |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 2.1 Search vendor "Artica" for product "Pandora Fms" and version "2.1" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 2.1.1 Search vendor "Artica" for product "Pandora Fms" and version "2.1.1" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 3.0 Search vendor "Artica" for product "Pandora Fms" and version "3.0" | - |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 3.0 Search vendor "Artica" for product "Pandora Fms" and version "3.0" | rc1 |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 3.0 Search vendor "Artica" for product "Pandora Fms" and version "3.0" | rc2 |
Affected
| ||||||
| Artica Search vendor "Artica" | Pandora Fms Search vendor "Artica" for product "Pandora Fms" | 3.1 Search vendor "Artica" for product "Pandora Fms" and version "3.1" | rc1 |
Affected
| ||||||