CVE

Id
46866  
CVE No.
CVE-2010-4282  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.  
Phase
Assigned (20101117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
512341 46866 CVE-2010-4282 BUGTRAQ:20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities  View
512342 46866 CVE-2010-4282 URL:http://www.securityfocus.com/archive/1/archive/1/514939/100/0/threaded  View
512343 46866 CVE-2010-4282 EXPLOIT-DB:15643  View
512344 46866 CVE-2010-4282 URL:http://www.exploit-db.com/exploits/15643  View
512345 46866 CVE-2010-4282 FULLDISC:20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities  View
512346 46866 CVE-2010-4282 URL:http://seclists.org/fulldisclosure/2010/Nov/326  View
512347 46866 CVE-2010-4282 CONFIRM:http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download  View
512348 46866 CVE-2010-4282 BID:45112  View
512349 46866 CVE-2010-4282 URL:http://www.securityfocus.com/bid/45112  View
512350 46866 CVE-2010-4282 OSVDB:69543  View
512351 46866 CVE-2010-4282 URL:http://osvdb.org/69543  View
512352 46866 CVE-2010-4282 OSVDB:69544  View
512353 46866 CVE-2010-4282 URL:http://osvdb.org/69544  View
512354 46866 CVE-2010-4282 OSVDB:69545  View
512355 46866 CVE-2010-4282 URL:http://osvdb.org/69545  View
512356 46866 CVE-2010-4282 SECUNIA:42347  View

Related JVN