Nagios XI - tfPassword SQL Injection

Nagios XI - tfPassword SQL Injection source: https://www.securityfocus.com/bid/63754/info Nagios XI is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Nagios Core Config Manager tfPassword SQL Injection

An SQL Injection vulnerability has been reported in Nagios Core Config Manager. The vulnerability is due to improper validation of the tfPassword parameter passed to the application. A remote unauthenticated attacker could exploit this vulnerability by sending a request with a crafted tfPassword...