Nagios XI Version 2024R1.01 - SQL Injection

Exploit Title: NAGIOS XI SQLI Google Dork: if applicable Date: 02/26/2024 Exploit Author: Jarod Jaslow MAWK https://www.linkedin.com/in/jarod-jaslow-codename-mawk-265144201/ Vendor Homepage: https://www.nagios.com/changelog/nagios-xi Software Link: https://github.com/MAWK0235/CVE-2024-24401...

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

CVE-2024-24401

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component...

CVE-2024-24401

Nagios XI version 2024R1.0.1 is vulnerable to an authenticated SQL injection via the /nagiosxi//config/monitoringwizard.php endpoint. This flaw allows a remote attacker to execute arbitrary SQL queries, leading to admin account creation and full remote code execution (RCE). The vulnerability has ...

Exploit for SQL Injection in Nagios Nagios_Xi

Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK...