Lucene search
+L

CVE-2023-40931

🗓️ 19 Sep 2023 23:15:09Reported by GoogleType 
osv_cve
 osv_cve
🔗 osv.dev👁 16 Views

Nagios XI SQL injection (5.11.0 to 5.11.1) via POST id on banner_message-ajaxhelper.php lets authenticated attackers run arbitrary SQL.

Related
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2023-40931
19 Sep 202323:15
–attackerkb
githubexploit
GithubExploit
Exploit for SQL Injection in Nagios Nagios_Xi
4 Apr 202512:35
–githubexploit
githubexploit
GithubExploit
Exploit for SQL Injection in Nagios Nagios_Xi
27 Apr 202401:42
–githubexploit
bdu_fstec
BDU FSTEC
Nagios XI Script Disclosure Protected Information
25 Sep 202300:00
–bdu_fstec
circl
Circl
CVE-2023-40931
20 Sep 202314:52
–circl
cnnvd
CNNVD
Nagios XI SQL Injection Vulnerability
19 Sep 202300:00
–cnnvd
cve
CVE
CVE-2023-40931
19 Sep 202300:00
–cve
cvelist
Cvelist
CVE-2023-40931
19 Sep 202300:00
–cvelist
hivepro
hivepro
Critical Security Vulnerabilities Uncovered in Nagios XI
25 Sep 202305:14
–hivepro
kitploit
Kitploit
Nagios-XI-s-CVE-2023-40931-Exploit
25 Sep 202602:29
–kitploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 May 2026 08:36Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.16.5
EPSS0.11869
16