CVE-2020-7935

CVE-2020-7935 describes a remote PHP code execution vulnerability in Artica Pandora FMS through version 7.42, stemming from an unrestricted file upload flaw in its File Manager. An authenticated administrator can upload malicious PHP files to an externally accessible directory and execute arbitrary code within the application's context. This vulnerability carries a CVSS score of 7.2 (High), indicating a network-exploitable flaw with low attack complexity that can lead to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, and it has received minimal community discussion or media coverage.