Pandora FMS authenticated command injection leading to RCE via chromium_path or phantomjs_bin

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.