CVE-2014-125115

An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user input in the loginhash_data parameter, allowing attackers to extract administrator credentials or active session tokens via crafted requests. This occurs because input is directly concatenated into an SQL query without adequate validation, enabling SQL injection. After authentication is bypassed, a second vulnerability in the File Manager component permits arbitrary PHP file uploads. The file upload functionality does not enforce MIME-type or file extension restrictions, allowing authenticated users to upload web shells into a publicly accessible directory and achieve remote code execution.

• CWE-89
• CWE-798

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/pandora_fms_sqli.rb
• https://web.archive.org/web/20140304121149/http://blog.pandorafms.org/?p=2041
• https://web.archive.org/web/20140331231237/http://pandorafms.com/downloads/whats_new_5-SP3.pdf
• https://www.exploit-db.com/exploits/35380
• https://www.vulncheck.com/advisories/pandora-fms-default-creds-sqli-rce

Published

Jul 25, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-125109A vulnerability was found in BestWebSoft Portfolio Plugin up…6.1
• CVE-2014-125110A vulnerability has been found in wp-file-upload Plugin up t…3.5
• CVE-2014-125111A vulnerability was found in namithjawahar Wp-Insert up to 2…3.5
• CVE-2014-125112Plack::Middleware::Session::Cookie versions through 0.21 for…9.8
• CVE-2014-125113An unrestricted file upload vulnerability exists in Dell (ac…9.3
• CVE-2014-125114A stack-based buffer overflow vulnerability exists in i-Ftp …8.4
• CVE-2014-125116A remote code execution vulnerability exists in HybridAuth v…9.3
• CVE-2014-125117A stack-based buffer overflow vulnerability in the my_cgi.cg…9.8
• CVE-2014-125118A command injection vulnerability exists in the eScan Web Ma…9.4
• CVE-2014-125119A filename spoofing vulnerability exists in WinRAR when open…8.4
• CVE-2014-125120Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2014-125121Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2…10