CVE-2024-35306: OS Command injection in Ajax PHP files through HTTP Request
OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: from 700 through <777.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35306?
The severity of CVE-2024-35306 is classified as high due to the potential for remote code execution through OS command injection.
How do I fix CVE-2024-35306?
To fix CVE-2024-35306, update your Pandora FMS installation to version 778 or later, which contains the necessary patches.
What systems are affected by CVE-2024-35306?
CVE-2024-35306 affects versions of Pandora FMS from 700 to 777.
What is OS command injection in the context of CVE-2024-35306?
OS command injection in CVE-2024-35306 allows an attacker to execute arbitrary system commands by injecting malicious input through vulnerable Ajax PHP files.
How can I detect if my system is vulnerable to CVE-2024-35306?
You can detect CVE-2024-35306 by checking your current version of Pandora FMS and reviewing logs for unusual command executions that suggest exploitation.