Security Advisory
CVE-2018-8734
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter.