Artica Pandora FMS 7.42
Approved changes feed: RSS · Atom
cpe:2.3:a:artica:pandora_fms:7.42:*:*:*:*:*:*:*
part: a version: 7.42 update: *
| Vendor | Artica (0f19f399-0cbf-52c8-988a-49f1b199888b) |
|---|---|
| Product | Pandora Fms (0c868f8a-993f-5736-ba6f-b4e66c866cc4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/pandorafms/pandorafms |
purl2cpe | 2026-06-01 10:13:11.721438 |
pkg:github/pandorafms/pandorafms |
purl2cpe | 2026-06-01 10:13:11.721439 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8500 |
vulnerable | 2026-06-08 05:27:16.654530 |
Details available
In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality
Published: 2020-03-02T15:03:22.000Z
Updated: 2024-11-18T17:48:20.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20050 |
vulnerable | 2026-06-08 05:13:30.440879 |
Details available
Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated user should create a new folder with a "tricky" name in the filemanager. The exploit works when the php-fileinfo extension is disabled on the host system. The attacker must include shell metacharacters in the content type.
Published: 2020-01-30T15:47:32.000Z
Updated: 2024-08-05T02:32:10.522Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.