CVE-2021-34074

PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requests. Date published : 2021-06-25 https://k4m1ll0.com/cve-pandorafms754-chained-xss-rce.html