CVE-2018-11222

PoC —

CVSS 3.0

7.5 high

EPSS

7%p93

Published

Jun 16, 2018 (Jun 16, 2018)

Modified

Jun 17, 2026

Description

Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint.

Vendors: artica
Products: pandora fms
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (6.5%)

In the news0 stories

No ingested article mentions this CVE yet.