admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 18:27:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-40931.md
0xMarcio d9f6f5801b Update CVE sources 2024-06-10 07:22
2024-06-10 07:22:43 +00:00

753 B
Raw Permalink Blame History

CVE-2023-40931

Description

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php

POC

Reference

No PoCs from references.

Github