Arbitrary File Upload and Execution in Pandora FMS v7.0 NG

This repository contains a Python exploit script (exploit-CVE-2020-5844.py) targeting Pandora FMS v7.0NG.742, specifically exploiting CVE-2020-5844. The exploit leverages an authenticated file upload vulnerability in the Pandora FMS web interface, allowing an attacker to upload and execute arbitrary PHP scripts. The script supports multiple modes: uploading a default web shell, running custom commands, deploying a reverse shell, or specifying a custom web shell filename. Authentication is required, either via username/password or a valid PHPSESSID cookie. The exploit interacts with the Pandora FMS web interface over HTTP, targeting endpoints such as the login page and the vulnerable file upload handler. The repository also includes a README.md with detailed usage instructions and a requirements.txt specifying the 'requests' Python library. The exploit is operational, providing real remote code execution capabilities on vulnerable targets.

This repository contains a Python exploit script (CVE-2020-5844.py) and a README for CVE-2020-5844, an authenticated remote code execution vulnerability in PandoraFMS 7.0-NG 742. The exploit requires valid admin credentials and a PHP reverse shell file. The script logs into the PandoraFMS web interface, uploads the PHP shell via the file repository extension, and then executes it by accessing the uploaded file's URL. If successful, the attacker receives a shell as the apache user. The README provides usage instructions and a brief description of the vulnerability. The main attack vector is network-based, targeting the web interface endpoints of PandoraFMS. The exploit is operational, requiring some manual setup (credentials, shell file, listener) but automating the exploitation process.