PT-2023-5388 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.11.0 through 5.11.1 Description: A SQL injection issue allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to "/nagiosxi/admin/banner message-ajaxhelper.php". This...