CVE-2020-11749

Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2.

• CWE-79

• https://medium.com/%40tehwinsam/multiple-xss-on-pandorafms-7-0-ng-744-64b244b8523c
• https://packetstormsecurity.com/files/158389/Pandora-FMS-7.0-NG-746-Script-Insertion-Code-Execution.htmlPoCExploit, Third Party Advisory, VDB Entry
• https://pandorafms.com/downloads/whats-new-747-EN.pdfRelease Notes, Vendor Advisory
• https://www.exploit-db.com/exploits/48707Exploit, Third Party Advisory, VDB Entry
• https://medium.com/%40tehwinsam/multiple-xss-on-pandorafms-7-0-ng-744-64b244b8523c
• https://packetstormsecurity.com/files/158389/Pandora-FMS-7.0-NG-746-Script-Insertion-Code-Execution.htmlPoCExploit, Third Party Advisory, VDB Entry
• https://pandorafms.com/downloads/whats-new-747-EN.pdfRelease Notes, Vendor Advisory
• https://www.exploit-db.com/exploits/48707Exploit, Third Party Advisory, VDB Entry

Published

Jul 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1174A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-11740An issue was discovered in xenoprof in Xen through 4.13.x, a…5.5
• CVE-2020-11741An issue was discovered in xenoprof in Xen through 4.13.x, a…8.8
• CVE-2020-11742An issue was discovered in Xen through 4.13.x, allowing gues…5.5
• CVE-2020-11743An issue was discovered in Xen through 4.13.x, allowing gues…5.5
• CVE-2020-11747Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-1175A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-11753An issue was discovered in Sonatype Nexus Repository Manager…8.8
• CVE-2020-11758An issue was discovered in OpenEXR before 2.4.1. There is an…5.5
• CVE-2020-11759An issue was discovered in OpenEXR before 2.4.1. Because of …5.5
• CVE-2020-1176A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-11760An issue was discovered in OpenEXR before 2.4.1. There is an…5.5