CVE-2012-10029: Improper Neutralization of Special Elements used in an OS Command

Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in visApi.php. An authenticated user can inject system commands via unsanitized parameters such as host, resulting in remote code execution...

Nagios XI Cross Site Scripting

================ 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI alert'0a29'&opt=topalerts Page: /nagiosxi/perfgraphs/index.php POC: http://site/nagiosxi/perfgraphs/index.php?view='alert'0a29'&start=&end=&startdate=&enddate=...