What’s Vulnerable › Vulnerabilities

CVE-2020-8500

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-02 · updated 2026-06-17
• Weakness: CWE-434

Description

In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality

Affected products

• Pandora FMS: 7.42

References

• https://k4m1ll0.com/cve-2020-8500.html
• https://pandorafms.com/downloads/extension-uploader-feature-explained.mp4
• https://k4m1ll0.com/cve-2020-8500.html
• https://pandorafms.com/downloads/extension-uploader-feature-explained.mp4

Get alerted when CVE-2020-8500 or the next vulnerability affects your stack