CVE-2023-40931

Published: 2023-09-19T23:15Z

Last Modified: 2024-11-21T08:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php > MITRE Terms of Use apply – see LICENSE‑MITRE.txt