CVE-2023-44088

Summary

CVE-2023-44088 is a critical SQL Injection vulnerability affecting Pandora FMS versions 700 through 774. This issue stems from the application's failure to neutralize special elements in SQL commands, allowing arbitrary SQL queries to be executed. With low-privileged accounts, attackers can exploit this vulnerability to gain unauthorized access or manipulate sensitive data within the affected system. This poses a significant risk to the security and integrity of the impacted Pandora FMS installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.