Pandora FMS Unrestricted File Upload Vulnerability Allowing Remote Code Execution

A vulnerability in Pandora FMS versions 777 through 800 allows for unrestricted file uploads of dangerous file types, leading to remote code execution. This issue arises from the File Repository Manager feature, where authenticated administrators can upload malicious PHP scripts and execute them by decoding the file location.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Pandora FMS is running.

Reproduction

To reproduce this vulnerability, an authenticated administrator can upload a PHP file through the File Repository Manager. The uploaded file can then be executed by accessing its location on the server, provided the php-fileinfo extension is disabled.

Remediation

Users can update to Pandora FMS version 801 or later, where this vulnerability has been addressed.