CVE

Id
46864  
CVE No.
CVE-2010-4280  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estado_agente action to index.php, related to operation/agentes/estado_agente.php.  
Phase
Assigned (20101117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
512313 46864 CVE-2010-4280 BUGTRAQ:20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities  View
512314 46864 CVE-2010-4280 URL:http://www.securityfocus.com/archive/1/archive/1/514939/100/0/threaded  View
512315 46864 CVE-2010-4280 EXPLOIT-DB:15641  View
512316 46864 CVE-2010-4280 URL:http://www.exploit-db.com/exploits/15641  View
512317 46864 CVE-2010-4280 EXPLOIT-DB:15642  View
512318 46864 CVE-2010-4280 URL:http://www.exploit-db.com/exploits/15642  View
512319 46864 CVE-2010-4280 FULLDISC:20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities  View
512320 46864 CVE-2010-4280 URL:http://seclists.org/fulldisclosure/2010/Nov/326  View
512321 46864 CVE-2010-4280 CONFIRM:http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download  View
512322 46864 CVE-2010-4280 BID:45112  View
512323 46864 CVE-2010-4280 URL:http://www.securityfocus.com/bid/45112  View
512324 46864 CVE-2010-4280 OSVDB:69547  View
512325 46864 CVE-2010-4280 URL:http://osvdb.org/69547  View
512326 46864 CVE-2010-4280 OSVDB:69548  View
512327 46864 CVE-2010-4280 URL:http://osvdb.org/69548  View
512328 46864 CVE-2010-4280 SECUNIA:42347  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31387 JVNDB-2011-001627 Samsung Integrated Management System DMS に SQL インジェクションの脆弱性 Samsung Integrated Management System Data Management Server (DMS) には、SQL インジェクションの脆弱性が存在します。 CVE-2010-4284 46864 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001627.html  View