PT-2018-10406

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions prior to 7.23 Description The issue allows an attacker to perform a Local File Inclusion LFI attack. This is achieved by calling any php file via the "/pandora console/ajax.php" API endpoint. Recommendations For...