CVE-2023-44088

MEDIUM

Pandora FMS <774 - SQL Injection

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774.

Exploits (1)

exploitdb WORKING POC
by Osama Yousef · pythonwebappsphp
https://www.exploit-db.com/exploits/52157

References (1)

Scores

CVSS v3 5.9
EPSS 0.0019
EPSS Percentile 41.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

Details

CWE
CWE-89
Status published
Products (1)
pandorafms/pandora_fms 700 - 774
Published Dec 29, 2023
Tracked Since Feb 18, 2026