CVE-2017-15935: Code Injection
Published Oct 27, 2017
·Updated
Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file.
Affected Software
1 affected component
Artica Pandora FMS=7.0
Event History
Oct 27, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15935?
CVE-2017-15935 is considered critical due to the potential for remote PHP code execution.
2
How do I fix CVE-2017-15935?
To fix CVE-2017-15935, upgrade to a version of Artica Pandora FMS that is not affected by this vulnerability.
3
Who can exploit CVE-2017-15935?
Only administrators with the ability to upload files can exploit CVE-2017-15935.
4
What type of vulnerability is CVE-2017-15935?
CVE-2017-15935 is a remote PHP code execution vulnerability.
5
What versions of Artica Pandora FMS are affected by CVE-2017-15935?
Artica Pandora FMS version 7.0 is affected by CVE-2017-15935.