A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-09-19T00:00:00
Updated: 2024-08-02T18:46:11.351Z
Reserved: 2023-08-22T00:00:00
Link: CVE-2023-40931
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-09-19T23:15:09.153
Modified: 2023-09-22T01:11:49.477
Link: CVE-2023-40931
Redhat
No data.