21 matches found
VulnCheck KEV: CVE-2018-10735
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...
CVE-2026-82669
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
CVE-2026-82669 klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of service
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
CVE-2026-82669 klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of service
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
EUVD-2026-68453
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
CVE-2026-82669
klaussilveira GitList 2.0.0 is affected by a denial of service vulnerability in the XML Parsing component, specifically the SimpleXMLElement function in src/SCM/System/Git/CommandLine.php. A remote attacker can trigger the flaw with low complexity and no authentication, causing partial availabili...
CVE-2026-82668 klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection
A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLine.php of the component Git Command Line. Such manipulation leads to os command injection. The attack can be executed...
CVE-2026-82668
klaussilveira GitList 2.0.0 is affected by an OS command injection vulnerability in the getDefaultBranch function of the Git Command Line component (src/SCM/System/Git/CommandLine.php). The attack is remotely exploitable with no authentication or user interaction required. A proof-of-concept expl...
PT-2026-83764
Name of the Vulnerable Software and Affected Versions klaussilveira GitList version 2.0.0 Description An OS command injection flaw exists in the Git Command Line component. The issue resides within the getDefaultBranch function located in the src/SCM/System/Git/CommandLine.php file, which allows ...
CVE-2026-82668: Improper Neutralization of Special Elements used in an OS Command
A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLine.php of the component Git Command Line. Such manipulation leads to os command injection. The attack can be executed...
CVE-2026-82669: Improper Resource Shutdown or Release
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out...
OCS Inventory NG CommandLine.php Command Injection (CVE-2020-14947)
A command injection vulnerability exists in OCS Inventory NG. The vulnerability is due to insufficient input validation in the CommandLine.php...
CVE-2020-14947: Improper Neutralization of Special Elements used in an OS Command
OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mibfile in plugins/mainsections/msconfig/mssnmpconfig.php is mishandled in getmiboid...
Sql injection
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...
CVE-2018-10735
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...
CVE-2018-10735
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...
CVE-2018-10735
A SQL injection vulnerability exists in Nagios XI versions prior to 5.4.13 (specifically 5.2.x and 5.4.x). The flaw resides in the admin/commandline.php file via the cname parameter. This vulnerability allows authenticated administrators to execute arbitrary SQL commands , which can lead to the u...
PT-2018-10073
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.4.13 Description A SQL injection issue was discovered via the cname parameter in the "admin/commandline.php" endpoint. Recommendations For versions prior to 5.4.13, update to version 5.4.13 or later to resolve the...
CVE-2018-10735: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...
NagiosXI <= 5.4.12 commandline.php SQL injection(CVE-2018-10735)
NagiosXI = 5.4.12 commandline.php SQL injectionCVE-2018-10735 Description A SQL injection issue was discovered in Nagios XI via the admin/commandline.php cname parameter. Affected Version Nagios XI 5.2.x Nagios XI 5.4.x before 5.4.13 Proof of concept http...