CVE-2023-44090
Assigner: PandoraFMS
Published: 2024-03-19T16:26:12.225Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: all
product: Pandora FMS
vendor: Pandora FMS
versions: lessThanOrEqual: <776
status: affected
version: 700
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: dabdurakhmanova@ptsecurity.com
datePublic: 2024-03-19T17:01:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. <span style="background-color: var(--darkreader-bg--wht);">This issue affects Pandora FMS: from 700 through &lt;776.</span>

<p></p>
value: 
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through <776.


impacts: capecId: CAPEC-66
descriptions: value: CAPEC-66 SQL Injection
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: Fixed in v776.
value: Fixed in v776.
source: discovery: EXTERNAL
title: UnautH SQL Injection
x_generator: engine: Vulnogram 0.1.0-dev