EUVD-2013-5869

Malware in sbrugna...

EUVD-2007-2702

Malware in sbrugna...

Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Nagios XI Magpiedebug.php Root Remote Code Execution", 'Description' = %q This module exploits two vulnerabilities in Nagios XI 5.5.6:...

Nagios XI Magpie_debug.php Root Remote Code Execution

This module exploits two vulnerabilities in Nagios XI 'Nagios XI Magpiedebug.php Root Remote Code Execution', 'Description' = %q This module exploits two vulnerabilities in Nagios XI MSFLICENSE, 'Author' = 'Chris Lyne @lynerc', Discovery and exploit 'Guillaume André @yaumn', Metasploit module...

Nagios XI Magpie_debug.php Root Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Nagios XI Magpiedebug.php Root Remote Code Execution", 'Description' = %q This module exploits two vulnerabilities in Nagios XI 5.5.6:...

NagiosXI Authentication Bypass (CVE-2018-8733)

An authentication bypass vulnerability exists in NagiosQL. Successful exploitation of this vulnerability would allow an unauthenticated attacker to make configuration changes and leverage an authenticated SQL injection vulnerability...

Nagios XI < 2012R2.4 SQL Injection Vulnerability (deprecated)

Binary data 7138.pasl...

NagiosQL Detection

Binary data 8367.prm...

Nagios XI < 2012R2.4 SQL Injection Vulnerability

Binary data 8369.prm...

Nagios XI < 2012R1.6 Multiple Vulnerabilities

Binary data 8366.prm...

NagiosQL txtSearch Parameter Cross-Site Scripting (CVE-2013-6039)

A cross site scripting vulnerability has been reported in NagiosQL. The vulnerability is due to lack of input validation on the txtSearch parameter passed to the hostdependencies.php resource. A remote attacker could exploit this vulnerability by enticing a user to follow a crafted link or view a...

NagiosQL Detection

Binary data nagiosqldetect.nbin...

CVE-2013-6039

Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...

CVE-2013-6039

Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...

CVE-2013-6039

NagiosQL 3.2 SP2 contains a reflected/XSS vulnerability (CVE-2013-6039) in the txtSearch parameter used by search functionality across pages such as admin/hostdependencies.php and admin/hosts.php (and related content_class.php code paths). The issue allows remote attackers to inject arbitrary HTM...

PT-2013-5935 · Nagios · Nagiosql

Name of the Vulnerable Software and Affected Versions: NagiosQL version 3.2 SP2 Description: The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to various pages,...

NagiosQL 3.2.0 SP2 Cross Site Scripting

I. VULNERABILITY ------------------------- Reflected XSS Attacks XSS vulnerabilities in NagiosQL 3.2.0 Servicepack 2 II. BACKGROUND ------------------------- NagiosQL is a web based administration tool designed for Nagios, but might also work with forks. It helps you to easily build a complex...

Nagios XI 2012R1.5b XSS / Command Execution / SQL Injection / CSRF

Nagios XI version 2012R1.5b suffers from cross site request forgery, cross site scripting, remote command injection, and remote SQL injection vulnerabilities. Reflected XSS: Alert Cloud Component: Example URL: http://nagiosxiserver/nagiosxi/includes/components/alertcloud/index.php?width=800";...

Remote file inclusion

PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathIT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...