small update in description of the module and documentation

Author: h00die-gr3y

documentation/modules/exploit/linux/http/pandora_fms_auth_rce_cve_2024_12971.md

@@ -3,9 +3,9 @@ Pandora FMS is a monitoring solution that provides full observability for your o
 This module exploits an command injection vulnerability in the `chromium-path` or `phantomjs-bin` directory
 setting at the application settings page of Pandora FMS.
 You need have admin access at the Pandora FMS Web application in order to execute this RCE.
-This access can be achieved leveraging a default password vulnerability in Pandora FMS that allows an attacker
-to access the Pandora FMS MySQL database, create a new admin user and gain administrative access to the Pandora FMS
-Web application.
+This access can be achieved by knowing the admin credentials to access the web application or leveraging a default
+password vulnerability in Pandora FMS that allows an attacker to access the Pandora FMS MySQL database,
+create a new admin user and gain administrative access to the Pandora FMS Web application.
 This attack can be remotely executed over the WAN as long as the MySQL services are exposed to the outside world.
 This issue affects Community, Free and Enterprise editions:
  - chromium-path: from v7.0NG.768 through <= v7.0NG.780

modules/exploits/linux/http/pandora_fms_auth_rce_cve_2024_12971.rb

@@ -27,10 +27,11 @@ def initialize(info = {})
           technology. This module exploits an command injection vulnerability in the `chromium-path` or
           `phantomjs-bin` directory setting at the application settings page of Pandora FMS.
           You need have admin access at the Pandora FMS Web application in order to execute this RCE.
-          This access can be achieved leveraging a default password vulnerability in Pandora FMS that
-          allows an attacker to access the Pandora FMS MySQL database, create a new admin user and gain
-          administrative access to the Pandora FMS Web application. This attack can be remotely executed
-          over the WAN as long as the MySQL services are exposed to the outside world.
+          This access can be achieved by knowing the admin credentials to access the web application or
+          leveraging a default password vulnerability in Pandora FMS that allows an attacker to access
+          the Pandora FMS MySQL database, create a new admin user and gain administrative access to the
+          Pandora FMS Web application. This attack can be remotely executed over the WAN as long as the
+          MySQL services are exposed to the outside world.
           This issue affects Community, Free and Enterprise editions:
           - chromium-path: from v7.0NG.768 through <= v7.0NG.780
           - phantomjs-bin: from v7.0NG.724 through <= v7.0NG.767