CVE-2020-11749

CRITICAL

Pandora FMS 7.0_ng-746 - Stored Cross-Site Scripting in SNMP Device Scan View

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-11749. PoCs published by AppleBois.

AI-analyzed exploit summary This exploit leverages a persistent XSS vulnerability in PandoraFMS 7.0 NG 746 by injecting malicious JavaScript into SNMP configuration fields. The JavaScript then creates a malicious plugin to execute a reverse shell command, achieving remote code execution.

Description

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2.

Exploits (1)

exploitdb WORKING POC

by AppleBois · textwebappsphp

https://www.exploit-db.com/exploits/48707

View Code ZIP pw:eip

This exploit leverages a persistent XSS vulnerability in PandoraFMS 7.0 NG 746 by injecting malicious JavaScript into SNMP configuration fields. The JavaScript then creates a malicious plugin to execute a reverse shell command, achieving remote code execution.

Classification

Working Poc 95%

Attack Type

Xss

Complexity

Moderate

Reliability

Reliable

Target: PandoraFMS 7.0 NG 746

Auth required

Prerequisites: Access to modify SNMP configuration · Network access to the PandoraFMS server · Valid credentials to interact with the PandoraFMS console

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →