19 matches found
CVE-2019-9202
CVE-2019-9202 Nagios IM 2.6 remote code execution exploit: CSRF + SQLi + RCE + LPE -- remote root Description By chaining a Cross-Site Request Forgery CSRF / authorization bypass CVE-2019-9203 it is possible to exploit a Union-based SQL injection CVE-2019-9204, a Remote Code Execution RCE...
EUVD-2019-18579
Malware in sbrugna...
CVE-2019-9204
SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...
CVE-2019-9203
Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...
CVE-2019-9202
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
Nagios IM Command Injection (CVE-2019-9202)
A command injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Nagios IM SQL Injection (CVE-2019-9204)
An SQL injection vulnerability exists in Nagios IM. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2019-9202
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
CVE-2019-9202
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
CVE-2019-9204
SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...
Input validation
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
CVE-2019-9203
CVE-2019-9203 affects Nagios IM (component of Nagios XI) prior to 2.2.7. The issue is an authorization bypass that permits closing incidents in IM via the API, enabling unauthorized operations. Documents consistently describe this vulnerability as an authorization bypass in Nagios IM before 2.2.7...
CVE-2019-9203
Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...
PT-2019-19435 · Nagios · Nagios Im
Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...
CVE-2019-9202: Undefined Security Weakness
Nagios IM component of Nagios XI before 2.2.7 allows authenticated users to execute arbitrary code via API key issues...
PT-2019-19433 · Nagios · Nagios Im
Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: The issue allows authenticated users to execute arbitrary code due to API key problems. Recommendations: For versions prior to 2.2.7, update to version 2.2.7 or later to resolve the issue...
CVE-2019-9204: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...
PT-2019-19434 · Nagios · Nagios Xi +1
Name of the Vulnerable Software and Affected Versions: Nagios IM versions prior to 2.2.7 Description: The issue allows for authorization bypass in Nagios IM, a component of Nagios XI, enabling the closure of incidents via the API. Recommendations: For versions prior to 2.2.7, update to version...