CVE-2018-10735

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

Sql injection

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

CVE-2018-10735

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

CVE-2018-10735

A SQL injection vulnerability exists in Nagios XI versions prior to 5.4.13 (specifically 5.2.x and 5.4.x). The flaw resides in the admin/commandline.php file via the cname parameter. This vulnerability allows authenticated administrators to execute arbitrary SQL commands , which can lead to the u...

CVE-2018-10735: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

PT-2018-10073

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.4.13 Description A SQL injection issue was discovered via the cname parameter in the "admin/commandline.php" endpoint. Recommendations For versions prior to 5.4.13, update to version 5.4.13 or later to resolve the...

Nagios XI多个远程安全漏洞

Bugtraq ID:57672 Nagios是一款免费开放源代码的主机和服务监视软件 Nagios存在多个安全漏洞，包括： -Alert Cloud组件存在反射型跨站脚本漏洞，可获得敏感信息或劫持用户会话。 -Nagios QL存在存储型跨站脚本漏洞，可获得敏感信息或劫持用户会话。 -Autodiscovery没有正确过滤输入，允许攻击者提交恶意作业执行任意代码。 -'admin/commandline.php'脚本不正确过滤用户提交的参数，允许攻击者利用漏洞注入任意SQL。 -Nagios QL存在跨站请求伪造漏洞，允许攻击者利用漏洞执行恶意操作。...