5 matches found
CVE-2013-6875: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in functions/prependadm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php...
CVE-2007-2709: Undefined Security Weakness
PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathphysical parameter...
CVE-2007-2710: Undefined Security Weakness
PHP remote file inclusion vulnerability in functions/prependadm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETSpathIT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
NagiosQL 2005 2.00 - prepend_adm.php Remote File Inclusion
NagiosQL 2005 2.00 - prependadm.php Remote File Inclusion NagiosQL Remote file inclusion Download script : http://dfn.dl.sourceforge.net/sourceforge/nagiosql/nagiosql-2.00-P00.tar.gz Thanks str0ke Exploit : http://victim.com/nagiosQLpath/functions/prependadm.php?SETSpathphysical=shell.txt?...
NagiosQL 2005 2.00 (prepend_adm.php) Remote File Inclusion Vuln
Exploit for unknown platform in category web applications =============================================================== NagiosQL 2005 2.00 prependadm.php Remote File Inclusion Vuln =============================================================== NagiosQL Remote file inclusion Download script :...