EDB-48959

PoC

Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)

view exploit source exploit_dbtype webappsauthor Matthew Abereggpublished 2020-10-28catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-5791UShigh7.2Exploit
Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privile…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan