CVE

CVE-2019-20224

8.8

CVSS

Description

netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?operation/netflow/nf_live_view request. This issue has been fixed in Pandora FMS 7.0 NG 742.

Attack Vector

Privileges Req.

User Interaction

Updated Oct 23, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2019-20224 Scanner

CVE-2019-20224 scanner - OS Command Injection vulnerability in Pandora FMS 7.0NG

Used 2.4k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →