NVD

Id
15554  
Name
CVE-2010-4282  
Description
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-02  
Modified Date
2010-12-10  
Seq
2010-4282  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88027 15554 CVE-2010-4282 20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities  View
88028 15554 CVE-2010-4282 http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download  View
88029 15554 CVE-2010-4282 15643  View
88030 15554 CVE-2010-4282 20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities  View
88031 15554 CVE-2010-4282 45112  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37630 JVNDB-2010-003415 Pandora FMS におけるディレクトリトラバーサルの脆弱性 Pandora FMS には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-4282 46862 CVE-2010-4282 15554 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003415.html 2010-12-02 2012-03-27 View