pentester.land· Jan 2, 2024· by Oliver Brooks

Technical Advisory – Multiple Vulnerabilities in PandoraFMS Enterprise

Target Program: PandoraFMS

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#Account takeover#Information disclosure#RCE#Unrestricted file upload#Stored XSS#Arbitrary file read#Local Privilege Escalation#Path traversal