Jgaliana

The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the `layout` parameter in an "operation/agentes/networkmap" action to "index.php".

The issue allows remote attackers to include and execute arbitrary local files via specific parameters in various PHP files. This can be achieved through the "page" parameter to "ajax.php", the "id" parameter to "general/pandora help.php", or the "layout" parameter to "operation/agentes/networkmap.php". This could potentially allow attackers to create, modify, or delete arbitrary local files.

The issue allows remote attackers to execute arbitrary PHP code via a URL in the `argv[1]` parameter in the extras/pandora diag.php file.