CVE-2012-10029

Publication date

2025-08-05 20:03:35

Family

VulnCheck

State

PUBLISHED

Description

Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in `visApi.php`. An authenticated user can inject system commands via unsanitized parameters such as `host`, resulting in remote code execution.