CVE-2018-11223

Description

XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agente&refr=" call.

References

https://pandorafms.com/wp-content/uploads/2018/06/whats-new-723-EN.pdf

https://blog.hackercat.ninja/post/pandoras_box/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS