CVE-2020-26518

Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/include/chart_generator.php session_id parameter.

Date published : 2020-10-02

https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained