CVE-2023-44088

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-440896.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-44098.8A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functCVE-2023-440906.4Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-581CVE-2023-440919.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL InjectioCVE-2023-440929.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS ComCVE-2023-440937.5Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affeCVE-2023-440945.3Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-440957.5Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.CVE-2023-440967.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service coCVE-2023-440977.5Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect serviCVE-2023-440987.5Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidenCVE-2023-440997.5Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption.