Description (CNA)
Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://pandorafms.com/wp-content/uploads/2018/06/whats-new-723-EN.pdf
- https://blog.hackercat.ninja/post/pandoras_box/
ADP enrichment
No English description supplied.