CVE-2010-4279

Related Files

Pandora 3.1 Auth Bypass / Arbitrary File Upload

Posted Jan 7, 2015

Authored by Juan Galiana Lara | Site metasploit.com

This Metasploit module exploits an authentication bypass vulnerability in Pandora version 3.1 as disclosed by Juan Galiana Lara. It also integrates with the built-in pandora upload which allows a user to upload arbitrary files to the '/images/' directory. This Metasploit module was created as an exercise in the Metasploit Mastery Class at Blackhat that was facilitated by egypt and mubix.

tags | exploit, arbitrary, bypass

advisories | CVE-2010-4279, OSVDB-69549

SHA-256 | a4ce59d4dd94c27dbf57cc0669eb39781c82929e9cbc36e77d98b4f23bc377e0

Download | Favorite | View

Pandora FMS Command Injection / SQL Injection / Path Traversal

Posted Dec 1, 2010

Authored by Juan Galiana Lara

Pandora FMS versions 3.1 and below suffer from authentication bypass, os command injection, remote SQL injection, remote file inclusion and path traversal vulnerabilities.

tags | exploit, remote, vulnerability, sql injection, file inclusion

advisories | CVE-2010-4279, CVE-2010-4278, CVE-2010-4280, CVE-2010-4281, CVE-2010-4282, CVE-2010-4283

SHA-256 | 1eb36c171f92f828e83d06f5a34529baec96147738184d46632dac589bd844f1

Download | Favorite | View