CVE-2023-44088: SQL Injection in Visual Console

Q: What is the severity of CVE-2023-44088?

CVE-2023-44088 is classified as a high severity SQL Injection vulnerability that allows arbitrary SQL queries to be executed.

Q: How do I fix CVE-2023-44088?

To fix CVE-2023-44088, upgrade your Pandora FMS installation to version 775 or later.

Q: What versions of Pandora FMS are affected by CVE-2023-44088?

CVE-2023-44088 affects Pandora FMS versions from 700 to 774.

Q: What type of attack does CVE-2023-44088 enable?

CVE-2023-44088 enables an SQL Injection attack that can be exploited using low privilege accounts.

Q: Can CVE-2023-44088 be exploited remotely?

Yes, CVE-2023-44088 can potentially be exploited remotely if an attacker has access to the vulnerable application.

Published Dec 29, 2023

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774.

Affected Software

1 affected component

PandoraFMS Pandora FMS>=700<=774

Remediation

Information

Fixed in v775.

Event History

Dec 29, 2023

CVE Published

11:48 AM

Data Sourced

11:48 AM

RemedyDescriptionSeverityWeakness

Apr 10, 2025

Exploit Published

12:00 AM

Known Exploited

09:48 AM

Frequently Asked Questions

What is the severity of CVE-2023-44088?

CVE-2023-44088 is classified as a high severity SQL Injection vulnerability that allows arbitrary SQL queries to be executed.

How do I fix CVE-2023-44088?