Show filters
155 Total Results
Displaying 141-150 of 155
Sort by:
Attacker Value
Unknown
CVE-2011-1523
Disclosure Date: May 03, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.
0
Attacker Value
Unknown
CVE-2009-4626
Disclosure Date: January 18, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conf[lang] parameter.
0
Attacker Value
Unknown
CVE-2009-2288
Disclosure Date: July 01, 2009 (last updated October 04, 2023)
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.
0
Attacker Value
Unknown
CVE-2008-6373
Disclosure Date: March 02, 2009 (last updated October 04, 2023)
Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and submitting service comments."
0
Attacker Value
Unknown
CVE-2008-5027
Disclosure Date: November 10, 2008 (last updated October 04, 2023)
The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) custom form or a (b) browser addon.
0
Attacker Value
Unknown
CVE-2008-5028
Disclosure Date: November 10, 2008 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs by this process, via unspecified HTTP requests.
0
Attacker Value
Unknown
CVE-2008-4796
Disclosure Date: October 30, 2008 (last updated October 04, 2023)
The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
0
Attacker Value
Unknown
CVE-2007-5803
Disclosure Date: May 13, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360.
0
Attacker Value
Unknown
CVE-2008-1360
Disclosure Date: March 17, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts, a different issue than CVE-2007-5624.
0
Attacker Value
Unknown
CVE-2007-5624
Disclosure Date: October 23, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts.
0
