SQL Injection

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. NagiosXI <= 5.4.12 - SQL injectionCVE-2018-10736Nagios · 42% likely

   CWE-89

2. NagiosXI <= 5.4.12 `commandline.php` SQL injectionCVE-2018-10735Nagios · 42% likely

   CWE-89

3. NagiosXI <= 5.4.12 menuaccess.php - SQL injectionCVE-2018-10738Nagios · 41% likely

   CWE-89

4. NagiosXI <= 5.4.12 logbook.php SQL injectionCVE-2018-10737Nagios · 41% likely

   CWE-89

5. Nagios XI < 5.11.3 - SQL InjectionCVE-2023-48084Nagios · 34% likely

   CWE-89

6. Nagios XI v5.11.0 - SQL InjectionCVE-2023-40931Nagios · 12% likely

   CWE-89

7. Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.CVE-2021-37350Nagios · 79% likely

   CWE-89

8. SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary SQL commands via the selInfoKey1 para…CVE-2018-8734Nagios · 54% likely

   CWE-89

9. SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payload to the monitoringwizard.php component.CVE-2024-24401Nagios · CVSS 9.8 · 46% likely

   CWE-89

10. Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attacker to make configuration changes and…CVE-2018-8733Nagios · 27% likely

    CWE-89

11. SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.CVE-2019-9204Nagios · 20% likely

    CWE-89

12. The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the malicious actor to be authenticated to the vuln…CVE-2021-33177Nagios · 10% likely

    CWE-89

13. SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id.CVE-2019-9165Nagios · 5.3% likely

    CWE-89

14. SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.CVE-2021-28925Nagios · 4.8% likely

    CWE-89

15. Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). NOTE: The vendor disputes this issues as not being a vulnera…CVE-2019-12279Nagios · 4.2% likely

    CWE-89

16. A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via…CVE-2023-40933Nagios · 3.5% likely

    CWE-89

17. SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via t…CVE-2013-6875Nagios · 3.2% likely

    CWE-89

18. Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page.CVE-2022-38250Nagios · 3.0% likely

    CWE-89

19. A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute…CVE-2023-40934Nagios · 2.4% likely

    CWE-89

20. Nagios XI < 5.6.14 Authenticated SQL Injection via SNMP Trap Interface PageCVE-2020-36857Nagios · CVSS 8.6 · 2.3% likely

    CWE-89

21. Nagios XI < 5.7.5 SQL injection via SNMP Trap Interface Edit PageCVE-2020-36869Nagios · CVSS 8.7 · 2.0% likely

    CWE-89

22. A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.CVE-2024-54960Nagios · CVSS 6.5 · 1.4% likely

    CWE-89

23. Nagios XI < 5.8.5 Core Config Manager (CCM) SQL Injection via Improper Escaping in Search TextCVE-2021-47693Nagios · CVSS 8.7 · 1.1% likely

    CWE-89

24. Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCMCVE-2012-10063Nagios · CVSS 8.7 · 1.1% likely

    CWE-89

25. Nagios XI < 5.2.4 SQL Injection in Notification SearchCVE-2016-15050Nagios · CVSS 8.7 · 1.1% likely

    CWE-89

26. In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any authenticated user to exploit a SQL Injection vulnerability.CVE-2025-67255Nagios · CVSS 8.8 · 1.1% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.