Description (CNA)
XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://pandorafms.com/wp-content/uploads/2018/06/whats-new-723-EN.pdf
- https://blog.hackercat.ninja/post/pandoras_box/
ADP enrichment
No English description supplied.