VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 19, 2023· Updated Sep 25, 2024

CVE-2023-40931

CVE-2023-40931

Description

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Nagios/Nagioscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=5.11.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.