CyberRota Analysis
AI-GeneratedThe Plugin File Manager in Pandora FMS versions 777 and later is vulnerable to a chained CSRF bypass and unrestricted file upload, enabling attackers to upload and execute arbitrary PHP code. This vulnerability poses a significant risk of Remote Code Execution, potentially compromising the integrity and security of affected systems. Organizations using Pandora FMS should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards.