CVE-2018-8734

Publication date

2018-04-18 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 parameter.