{"uuid": "55ee25a3-10aa-4863-bbac-e24adb098a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-125115", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_fms_sqli.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Lincoln \", \"Jason Kratzer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to exploit multiple issues in order to gain remote\\n          code execution under Pandora FMS version <= 5.0 SP2.  First, an attempt\\n          to authenticate using default credentials is performed.  If this method\\n          fails, a SQL injection vulnerability is leveraged in order to extract\\n          the \\\"Auto Login\\\" password hash.  If this value is not set, the module\\n          will then extract the administrator account's MD5 password hash.\", \"disclosure_date\": \"2014-02-01\", \"fullname\": \"exploit/linux/http/pandora_fms_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Pandora FMS Default Credential / SQLi Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/pandora_fms_sqli.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/pandora_fms_sqli\", \"references\": [\"CVE-2014-125115\", \"URL-http://pandorafms.com/downloads/whats_new_5-SP3.pdf\", \"URL-http://blog.pandorafms.org/?p=2041\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Pandora FMS version <= 5.0 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.765983Z"}