Lucene search
MitreCVELIST:CVE-2021-40344HistoryOct 26, 2021 - 10:52 a.m.
CVE-2021-40344
2021-10-2610:52:00
mitre
www.cve.org
4
nagios xi
custom includes
remote command execution
cve-2021-40344
admin panel
upload files
arbitrary extensions
mime type
crafted php script
An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution.
Related
nvd
nvd
CVE-2021-40344
2021-10-26 11:15:07
checkpoint_advisories
checkpoint_advisories
Nagios XI Remote Code Execution (CVE-2021-40344)
2022-01-25 00:00:00
prion
prion
Sql injection
2021-10-26 11:15:00
cve
cve
CVE-2021-40344
2021-10-26 11:15:07