writeups.xyz / PandoraFMS - Pre-Auth Remote Code Execution

Submitter : c2a

Date: 6 January 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Arbitrary File Upload
• LFI
• Security Code Review

Programs :

• PandoraFMS

Authors :

• Esj4y (@Esj4y)

Link :
https://3sjay.github.io/2023/01/06/pandoraFMS-Pre-Auth-RCE.html