CVE-2019-20050

Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated user should create a new folder with a "tricky" name in the filemanager. The exploit works when the php-fileinfo extension is disabled on the host system. The attacker must include shell metacharacters in the content type.

• CWE-78

• https://k4m1ll0.com/cve-2019-20050.htmlExploit, Third Party Advisory
• https://k4m1ll0.com/cve-2019-20050.htmlExploit, Third Party Advisory

Published

Jan 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20045The Synergy Systems & Solutions PLC & RTU system has a vulne…7.5
• CVE-2019-20046The Synergy Systems & Solutions PLC & RTU system has a vulne…9.8
• CVE-2019-20047An issue was discovered on Alcatel-Lucent OmniVista 4760 dev…7.5
• CVE-2019-20048An issue was discovered on Alcatel-Lucent OmniVista 8770 dev…7.2
• CVE-2019-20049An issue was discovered on Alcatel-Lucent OmniVista 4760 dev…9.8
• CVE-2019-2005In onPermissionGrantResult of GrantPermissionsActivity.java,…
• CVE-2019-20051A floating-point exception was discovered in PackLinuxElf::e…5.5
• CVE-2019-20052A memory leak was discovered in Mat_VarCalloc in mat.c in ma…6.5
• CVE-2019-20053An invalid memory address dereference was discovered in the …5.5
• CVE-2019-20054In the Linux kernel before 5.0.6, there is a NULL pointer de…5.5
• CVE-2019-20055LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Du…6.5
• CVE-2019-20056stb_image.h (aka the stb image loader) 2.23, as used in libs…6.5