CVEvulnerability

CVE-2013-6875

7.5 HIGH Published 2013-11-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-11-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-89

Description

SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parameter to nagiosql/index.php.

Affected configurations

• nagios nagios xi (<= 2012r2.3) • nagios nagios xi 2012 • nagios nagios xi 2012r1.0 • nagios nagios xi 2012r1.1 • nagios nagios xi 2012r1.2 • nagios nagios xi 2012r1.3 • nagios nagios xi 2012r1.4 • nagios nagios xi 2012r1.5 • nagios nagios xi 2012r1.6 • nagios nagios xi 2012r1.7 • nagios nagios xi 2012r1.8 • nagios nagios xi 2012r1.9 • nagios nagios xi 2012r2.0 • nagios nagios xi 2012r2.1 • nagios nagios xi 2012r2.2

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References