CVE-2018-10735

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

CVE-2018-10735

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter...

CVE-2018-10735

Nagios XI is affected by a SQL injection in the admin/commandline.php cname parameter, impacting Nagios XI versions up to 5.4.12. The issue allows authenticated administrators to execute arbitrary SQL commands, potentially accessing or modifying the database and compromising the instance. Remedia...

NagiosXI <= 5.4.12 commandline.php SQL injection(CVE-2018-10735)

NagiosXI = 5.4.12 commandline.php SQL injectionCVE-2018-10735 Description A SQL injection issue was discovered in Nagios XI via the admin/commandline.php cname parameter. Affected Version Nagios XI 5.2.x Nagios XI 5.4.x before 5.4.13 Proof of concept http...