Nagios XI 5.7.5 漏洞列表
共找到 2 个与 Nagios XI 5.7.5 相关的漏洞
📅 加载漏洞趋势中...
-
CVE-2021-25299: Nagios XI 5.7.5 - Cross-Site Scripting POC
Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with the previous bugs to get one-click remote command execution on the Nagios XI server. -
CVE-2021-25299: Nagios XI 5.7.5 - Cross-Site Scripting POC
Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with the previous bugs to get one-click remote command execution on the Nagios XI server.