CVE-2010-4282

no score yetEPSS 20%

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2010-12-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

artica:pandora_fms

References

http://osvdb.org/69543
http://osvdb.org/69544
http://osvdb.org/69545
http://seclists.org/fulldisclosure/2010/Nov/326
http://secunia.com/advisories/42347

Check your stack JSON