CVE-2020-28903

Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server to inject arbitrary HTML, aka XSS...

CVE-2020-28903

Nagios Fusion 4.1.8 and earlier are affected by an XSS vulnerability due to improper input validation. A remote attacker who controls a fused server can inject arbitrary HTML into the Fusion server context. This is documented across multiple sources (Red Hat CVE entry, NVD/NASL references, CNVD/C...

EUVD-2020-21293

Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmdsubsys.php...

CVE-2020-28902

Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmdsubsys.php...

CVE-2020-28902

CVE-2020-28902 affects Nagios Fusion 4.1.8 and earlier. The issue is a command injection in cmd_subsys.php that permits privilege escalation from apache to root. Red Hat and NVD references corroborate the description. Connected sources do not provide concrete exploit details beyond the function/f...

CVE-2020-28901

CVE-2020-28901 affects Nagios Fusion 4.1.8 and earlier. The vulnerability is a command injection in the Fusion component, specifically in the cmd_subsys.php path, enabling privilege escalation from apache to root (and potential code execution) via a corrupt component installation vector. Document...

CVE-2020-28901

Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code Execution as root via vectors related to corrupt component installation in cmdsubsys.php...

CVE-2020-28900

Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to an untrusted update package to upgradetolatest.sh...

CVE-2020-28900

CVE-2020-28900 affects Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier. The root cause is insufficient verification of data authenticity, enabling privilege escalation or code execution via an untrusted update package (upgrade_to_latest.sh). Documented impact includes escalation t...

Nagios 安全漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A privilege-granting and access-control error vulnerability exists in Nagios Fusion version 4.1.8 and earlier and Nagios XI version 5.7.5 and earlier, which can be exploited by an attacker to escala...

Nagios 数据伪造问题漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier and Nagios XI version 5.7.5 and earlier, which stems from unduplicated Yankee data authenticity in the program and can be...

Nagios 命令注入漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A command injection vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to escalate privileges from apache to root...

Nagios 安全漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. An access control error vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to extract the password used to manage the Fusion server via the...

Nagios 信任管理问题漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier versions, which can be exploited by attackers to elevate privileges or execute code...

Nagios 代码注入漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. An input validation error vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an authenticated attacker to execute remote code via table paging...

Nagios 安全漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to escalate privileges to Nagios by installing a malicious component containing PHP...

Nagios 命令注入漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A command injection vulnerability exists in Nagios Fusion version 4.1.8 and earlier versions, which can be exploited by an attacker to elevate privileges...

Nagios 权限许可和访问控制问题漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A security vulnerability exists in Nagios Fusion version 4.1.8 and earlier and Nagios XI version 5.7.5 and earlier, which stems from the program's incorrect file permissions allowing privilege...

Nagios 命令注入漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A command injection vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to elevate privileges or execute code as root via vectors in cmdsubsys.php...

Nagios 跨站脚本漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. A cross-site scripting vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by remote attackers to take control of the Fusion server and inject arbitrary HTML...