{"api_version":"1","generated_at":"2026-07-23T11:05:36+00:00","cve":"CVE-2010-4282","urls":{"html":"https://cve.report/CVE-2010-4282","api":"https://cve.report/api/cve/CVE-2010-4282.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4282","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4282"},"summary":{"title":"CVE-2010-4282","description":"Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-12-02 17:15:00","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://seclists.org/fulldisclosure/2010/Nov/326","name":"http://seclists.org/fulldisclosure/2010/Nov/326","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Full Disclosure: Pandora FMS Authentication Bypass and Multiple\tInput Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.exploit-db.com/exploits/15643","name":"http://www.exploit-db.com/exploits/15643","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Pandora FMS <= 3.1 Path Traversal and LFI","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42347","name":"http://secunia.com/advisories/42347","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Pandora FMS Multiple Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/69543","name":"http://osvdb.org/69543","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://osvdb.org/69545","name":"http://osvdb.org/69545","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download","name":"http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Download Pandora FMS: Flexible Monitoring System from SourceForge.net","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://osvdb.org/69544","name":"http://osvdb.org/69544","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/514939/100/0/threaded","name":"http://www.securityfocus.com/archive/1/514939/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/45112","name":"http://www.securityfocus.com/bid/45112","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Pandora FMS Authentication Bypass And Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4282","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4282","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.3","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.3","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.3","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.3","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"1.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"2.0","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"3.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"3.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"3.1","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4282","vulnerable":"1","versionEndIncluding":"3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"artica","cpe5":"pandora_fms","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:43:14.042Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"69545","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/69545"},{"name":"42347","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42347"},{"name":"20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/514939/100/0/threaded"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download"},{"name":"69543","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/69543"},{"name":"45112","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45112"},{"name":"69544","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/69544"},{"name":"20101130 Pandora FMS Authentication Bypass and Multiple\tInput Validation Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2010/Nov/326"},{"name":"15643","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"http://www.exploit-db.com/exploits/15643"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-10-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"69545","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/69545"},{"name":"42347","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42347"},{"name":"20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/514939/100/0/threaded"},{"tags":["x_refsource_CONFIRM"],"url":"http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download"},{"name":"69543","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/69543"},{"name":"45112","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45112"},{"name":"69544","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/69544"},{"name":"20101130 Pandora FMS Authentication Bypass and Multiple\tInput Validation Vulnerabilities","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2010/Nov/326"},{"name":"15643","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"http://www.exploit-db.com/exploits/15643"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-4282","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"69545","refsource":"OSVDB","url":"http://osvdb.org/69545"},{"name":"42347","refsource":"SECUNIA","url":"http://secunia.com/advisories/42347"},{"name":"20101130 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/514939/100/0/threaded"},{"name":"http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download","refsource":"CONFIRM","url":"http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download"},{"name":"69543","refsource":"OSVDB","url":"http://osvdb.org/69543"},{"name":"45112","refsource":"BID","url":"http://www.securityfocus.com/bid/45112"},{"name":"69544","refsource":"OSVDB","url":"http://osvdb.org/69544"},{"name":"20101130 Pandora FMS Authentication Bypass and Multiple\tInput Validation Vulnerabilities","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2010/Nov/326"},{"name":"15643","refsource":"EXPLOIT-DB","url":"http://www.exploit-db.com/exploits/15643"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-4282","datePublished":"2010-12-02T17:00:00.000Z","dateReserved":"2010-11-17T00:00:00.000Z","dateUpdated":"2024-08-07T03:43:14.042Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-02 17:15:00","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"A972A8C1-4418-457A-B333-31CBFEA87F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E5F58083-665E-40CE-94E8-AF46BD41E2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C4153C42-C38B-4DF8-9C24-2060FB18F370"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.3:beta:*:*:*:*:*:*","matchCriteriaId":"2544AF2E-0BA3-409F-9AF4-7B42751C8E56"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.3:beta1:*:*:*:*:*:*","matchCriteriaId":"95734EBF-826B-43B9-B790-111329AB8581"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.3:beta2:*:*:*:*:*:*","matchCriteriaId":"34FB9160-6109-4C68-B8C2-E9FF5FA1E783"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.3:beta3:*:*:*:*:*:*","matchCriteriaId":"A7220D9B-1FAB-4265-90D9-87630AE906B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F912B082-3834-462C-956E-5003E5CDF624"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE24C15F-4653-46CB-9C8F-6DE942154B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"1464A86D-222B-49BD-A4F5-9AE5AD57E016"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAF92EC0-0616-4F17-9588-70C22C69A579"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"69446BEE-365D-49B5-9AEC-268AA93D8E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CD917088-E151-4EC1-94AE-2D3F2F3A600B"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8BBEA8F8-E1FB-4C62-91FD-67EBD5006F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:3.0:rc2:*:*:*:*:*:*","matchCriteriaId":"98406056-AD7A-4A54-80B8-280E197F90ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:artica:pandora_fms:3.1:rc1:*:*:*:*:*:*","matchCriteriaId":"B32CC8A6-A253-4DD2-867C-DCE583F073E0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4282","Ordinal":"1","Title":"CVE-2010-4282","CVE":"CVE-2010-4282","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4282","Ordinal":"1","NoteData":"Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.","Type":"Description","Title":"CVE-2010-4282"},{"CveYear":"2010","CveId":"4282","Ordinal":"2","NoteData":"2010-12-02","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4282","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}