Lucene search
MitreVULNRICHMENT:CVE-2023-40931HistorySep 19, 2023 - 12:00 a.m.
CVE-2023-40931
2023-09-1900:00:00
mitre
github.com
sql injection
nagios xi
authenticated attackers
arbitrary commands
post request
A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php
Related
cve
cve
CVE-2023-40931
2023-09-19 23:15:09
prion
prion
Sql injection
2023-09-19 23:15:00
nvd
nvd
CVE-2023-40931
2023-09-19 23:15:09
cvelist
cvelist
CVE-2023-40931
2023-09-19 00:00:00
thn
thn
Critical Security Flaws Exposed in Nagios XI Network Monitoring Software
2023-09-20 12:38:00
hivepro
hivepro
Critical Security Vulnerabilities Uncovered in Nagios XI
2023-09-25 05:14:53
nessus
nessus
Nagios XI < 5.11.2 Multiple Vulnerabilities
2023-09-21 00:00:00
AI Score
8.3
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-40931