Nagios XI SQL Injection Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A SQL injection vulnerability exists in Nagios XI versions 5.4.x prior to 5.4.13 and 5.2.x. The vulnerabili...

CVE-2018-8734

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter...

CVE-2018-8734

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter...

CVE-2018-8734: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter...

PT-2018-18606

Name of the Vulnerable Software and Affected Versions Nagios XI versions 5.2.x through 5.4.x before 5.4.13 Description A SQL injection issue exists in the core config manager, allowing an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter. Recommendations For Nagios XI...