CVE-2012-10029: Improper Neutralization of Special Elements used in an OS Command

Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in visApi.php. An authenticated user can inject system commands via unsanitized parameters such as host, resulting in remote code execution...

Nagios XI Network Monitor Graph Explorer Component - Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Nagios XI Network...

Nagios XI Network Monitor 2011R1.9 SQL Injection Vulnerability

Nagios XI Network Monitor version 2011R1.9 suffers from a remote blind SQL injection vulnerability. ======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282...