2 matches found
Sql injection
A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the updatebannermessage function...
6.5CVSS9AI score0.03547EPSS
SaveExploits1References3Affected Software1
CVE-2023-40933: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the updatebannermessage function...
8.8CVSS8.3AI score0.03547EPSS
SaveExploits1References6
20