CVE-2012-10029 Nagios XI Network Monitor Graph Explorer Component < 1.3 Authenticated Command Injection
HighCVSS 8.6
EPSS 3.5%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in visApi.php. An authenticated user can inject system commands via unsanitized parameters such as host, resulting in remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Nagios Enterprises, LLC. Nagios XI Graph Explorer | < 1.3 | 1.3 |
References
- raw.githubusercontent.com exploit
- www.exploit-db.com exploit
- packetstorm.news exploit
- www.nagios.com product
- www.vulncheck.com third-party-advisory