VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 19, 2023· Updated Jul 9, 2026

CVE-2023-40931

CVE-2023-40931

Description

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Nagios/XI
    cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*
    Range: >=5.11.0,<5.11.2
  • Nagios/Nagioscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=5.11.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.