CVE-2020-5844

This exploit targets CVE-2020-5844 in Pandora FMS v7.0NG.742, allowing authenticated administrators to upload a malicious PHP script via a file upload vulnerability. The script can execute arbitrary commands, including reverse shells, through a base64-decoded payload.

This repository contains a functional Python exploit for CVE-2020-5844, targeting Pandora FMS v7.0NG.742. The exploit allows authenticated administrators to upload and execute malicious PHP scripts via a file upload vulnerability in the extensions/files_repo endpoint.

This repository contains a functional Python exploit for CVE-2020-5844, an authenticated RCE vulnerability in PandoraFMS 7.0-NG 742. The exploit uploads a malicious PHP file via the file repository feature and triggers execution by accessing the uploaded file.