Description (CNA)
SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f
- https://www.exploit-db.com/exploits/44560/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://blog.redactedsec.net/exploits/2018/04/26/nagios.html
- https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
- https://www.exploit-db.com/exploits/44969/
ADP enrichment
No English description supplied.
- https://gist.github.com/caleBot/f0a93b5a98574393e0139104eacc2d0f
- https://www.exploit-db.com/exploits/44560/
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://blog.redactedsec.net/exploits/2018/04/26/nagios.html
- https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
- https://www.exploit-db.com/exploits/44969/