critical9.8
CVE-2019-9165
SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id.
Impact
SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nagios | Nagios Xi | before 5.5.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://www.nagios.com/products/security/
- http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html
- https://www.nagios.com/downloads/nagios-xi/change-log/
- https://www.nagios.com/products/security/