EDB-46910

PoC

Nagios XI 5.6.1 - SQL injection

view exploit source exploit_dbtype webappsauthor JameelNabbopublished 2019-05-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-12279UScritical9.8Exploit
Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). NOTE: The vendor disputes this issues as not being a vulnerab…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan