EIP-2026-110454
PRE-CVEPandora FMS 3.x - 'index.php' Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-110454. PoCs published by mehdi boukazoula.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in Pandora FMS by injecting a malicious script via the 'search' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to session hijacking or other client-side attacks.
Description
Pandora FMS 3.x - 'index.php' Cross-Site Scripting
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in Pandora FMS by injecting a malicious script via the 'search' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to session hijacking or other client-side attacks.