PT-2021-19890

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.7 Description The issue affects the /nagiosxi/admin/graphtemplates.php component, where code injection is possible. To exploit this, an attacker must have an admin user account in Nagios XI's web system...

Nagios XI 5.7.x Remote Code Execution

Exploit Title: Nagios XI 5.7.X - Remote Code Exection RCE Authenticated Date: 19/12/2020 Exploit Author: Haboob Team https://haboob.sa Vendor Homepage: https://www.nagios.com/products/nagios-xi/ Version: Nagios XI 5.7.x Tested on: Ubuntu 18.04 / PHP 7.2.24 & Vendor's custom VM CVE: CVE-2020-35578...