| Package | Affected versions | Patched versions |
|---|---|---|
| nagios xi | = 2012= 2012r1.0= 2012r1.1= 2012r1.2= 2012r1.3= 2012r1.4= 2012r1.5= 2012r1.6= 2012r1.7= 2012r1.8= 2012r1.9= 2012r2.0= 2012r2.1= 2012r2.2≤ 2012r2.3 |
SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free