Juan Galiana Lara

The issue allows remote attackers to execute arbitrary PHP code via a URL in the `argv[1]` parameter in the extras/pandora diag.php file.

The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the `layout` parameter in an "operation/agentes/networkmap" action to "index.php".

The issue allows remote attackers to bypass authentication. This is achieved by sending a request to "index.php" with "admin" in the `loginhash user` parameter, in conjunction with the md5 hash of "admin" in the `loginhash data` parameter.

The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via two specific API endpoints: "operation/agentes/ver agente" in "ajax.php" using the `id group` parameter, or "operation/agentes/estado agente" in "index.php" using the `group id` parameter. The vulnerability is related to the "operation/agentes/estado agente.php" file.

The issue allows remote attackers to include and execute arbitrary local files via specific parameters in various PHP files. This can be achieved through the "page" parameter to "ajax.php", the "id" parameter to "general/pandora help.php", or the "layout" parameter to "operation/agentes/networkmap.php". This could potentially allow attackers to create, modify, or delete arbitrary local files.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the administration interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific PHP files, including `phpshell.php`, `cmdshell.php`, or `sqlshell.php` in the `admin/` directory. The issue is related to the `PHP SELF` variable.

The issue allows remote attackers to conduct cross-site scripting (XSS) attacks via `data:text/html` values for the `HREF` attribute of an `A` element in an HTML e-mail message. This is due to improper handling of `data:` URIs.

Name of the Vulnerable Software and Affected Versions: ModSecurity versions prior to 2.5.9 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a multipart form data post request with a missing part header name. This triggers a NULL pointer dereference. Recommendations: For versions prior to 2.5.9, update to version 2.5.9 or later to resolve the issue.

A cross-site scripting (XSS) issue exists due to insufficient validation of the HTTP Host header. This allows remote attackers to inject arbitrary web script or HTML.