Security Advisory

CVE-2018-11221

9.8
CRITICAL

Vulnerability Description

Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via include/ajax/update_manager.ajax in the update system.
Published Date June 16, 2018
Official Source NIST NVD Advisory