tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-31 01:35:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-13716-vulnerabilidad-netflow' into 'develop'

Browse Source 
Ent 13716 Vulnerabilidad netflow

See merge request artica/pandorafms!7370
This commit is contained in:
Diego Muñoz-Reja 2024-05-16 08:10:11 +00:00
commit 6bb9fe1be6
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/include/functions_netflow.php
View File

@ -804,8 +804,9 @@ function netflow_get_stats(
return json_decode($data, true); return json_decode($data, true);
} }
$aggregate = escapeshellarg($aggregate.'/bytes');
// Get the command to call nfdump. // Get the command to call nfdump.
$options = "-o csv -q -n $max -s $aggregate/bytes -t ".date($nfdump_date_format, $start_date).'-'.date($nfdump_date_format, $end_date); $options = "-o csv -q -n $max -s $aggregate -t ".date($nfdump_date_format, $start_date).'-'.date($nfdump_date_format, $end_date);
$command = netflow_get_command($options, $filter, $start_date_fixed, $end_date_fixed); $command = netflow_get_command($options, $filter, $start_date_fixed, $end_date_fixed);
// Execute nfdump. // Execute nfdump.
exec($command, $string); exec($command, $string);
@ -1147,6 +1148,7 @@ function netflow_get_command($options, $filter, $date_init=0, $date_end=0)
// Filter options. // Filter options.
$command .= ' '.netflow_get_filter_arguments($filter); $command .= ' '.netflow_get_filter_arguments($filter);
return $command; return $command;
} }
@ -2186,9 +2188,9 @@ function netflow_get_top_data(
// Get the command to call nfdump. // Get the command to call nfdump.
$options = sprintf( $options = sprintf(
'-q -o csv -n %s -s %s/bytes -t %s-%s', '-q -o csv -n %s -s %s -t %s-%s',
$max, $max,
$aggregate, escapeshellarg($aggregate.'/bytes'),
date($nfdump_date_format, $start_date), date($nfdump_date_format, $start_date),
date($nfdump_date_format, $end_date) date($nfdump_date_format, $end_date)
); );