Summary
This host is installed with Pandora FMS
and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow attackers
to gain privileged access, inject or manipulate SQL queries in the back-end database allowing for the manipulation or disclosure of arbitrary data.
Impact Level: Application
Solution
Upgrade to Pandora FMS version 5.1 SP1 or
later. For updates refer http://pandorafms.com
Insight
Multiple flaws are due to,
- The application installs with default user credentials.
- An input passed to index.php script via the 'user' parameter is not properly sanitized before returning to users.
Affected
Pandora FMS version 5.0 SP2 and prior.
Detection
Send a crafted request via HTTP GET and
check whether it is able to execute sql query or not.
References
Updated on 2015-03-25
