4 matches found
CVE-2018-10737
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter...
Sql injection
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter...
CVE-2018-10737: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter...
PT-2018-10075
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.4.13 Description A SQL injection issue was discovered via the txtSearch parameter in the "admin/logbook.php" endpoint. Recommendations For versions prior to 5.4.13, update to version 5.4.13 or later to resolve the...