Nagios XI - tfPassword SQL Injection

Nagios XI - tfPassword SQL Injection source: https://www.securityfocus.com/bid/63754/info Nagios XI is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Nagios XI SQLi Vulnerability (Dec 2013) - Active Check

Nagios XI is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2013-6875

Nagios XI Core Config Manager (Nagios Core Config Manager) is affected by CVE-2013-6875 due to an SQL injection in functions/prepend_adm.php, allowing remote attackers to manipulate arbitrary SQL via the tfPassword parameter in nagiosql/index.php. Multiple validators (NVD, Red Hat, Nessus/Nessus ...