CVE-2017-15935

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0

Description The issue allows for remote PHP code execution through the manager files function. This can only be exploited by administrators who upload a PHP file.

Recommendations For Artica Pandora FMS version 7.0, restrict access to the manager files function to prevent unauthorized PHP file uploads until a fix is available. As a temporary workaround, consider disabling the ability for administrators to upload PHP files through this function.