CVE-2020-8500

n/a / n/a PUBLISHED

Description (CNA)

In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://k4m1ll0.com/cve-2020-8500.html
https://pandorafms.com/downloads/extension-uploader-feature-explained.mp4

ADP enrichment

CVE

No English description supplied.

https://k4m1ll0.com/cve-2020-8500.html
https://pandorafms.com/downloads/extension-uploader-feature-explained.mp4

CISA-ADP

No English description supplied.

No references supplied.