daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add additional affected versions

patch-1
Matthew Mathur 2023-02-02 17:14:24 -05:00
parent fdd2d419f0
commit d34bc2fe03
3 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cves/2021/CVE-2021-25296.yaml
View File

@ -1,10 +1,10 @@
id: CVE-2021-25296 id: CVE-2021-25296
info: info:
name: Nagios XI 5.7.5 Command Injection name: Nagios XI versions 5.5.6 to 5.7.5 Command Injection
author: k0pak4 author: k0pak4
severity: critical severity: critical
description: Nagios XI 5.7.5 is affected by OS command injection. An authenticated user can gain code execution with a single HTTP request due to unsanitized URL paramaters. description: Nagios XI versions 5.5.6 to 5.7.5 are affected by OS command injection. An authenticated user can gain code execution due to unsanitized URL paramaters.
reference: reference:
- https://nvd.nist.gov/vuln/detail/CVE-2021-25296 - https://nvd.nist.gov/vuln/detail/CVE-2021-25296
- https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md - https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md

6
cves/2021/CVE-2021-25297.yaml
View File

@ -1,10 +1,10 @@
id: CVE-2021-25297 id: CVE-2021-25297
info: info:
name: Nagios XI 5.7.5 Command Injection name: Nagios XI versions 5.5.6 to 5.7.5 Command Injection
author: k0pak4 author: k0pak4
severity: critical severity: critical
description: Nagios XI 5.7.5 is affected by OS command injection. An authenticated user can gain code execution with a single HTTP request due to unsanitized URL paramaters. description: Nagios XI versions 5.5.6 to 5.7.5 are affected by OS command injection. An authenticated user can gain code execution due to unsanitized URL paramaters.
reference: reference:
- https://nvd.nist.gov/vuln/detail/CVE-2021-25297 - https://nvd.nist.gov/vuln/detail/CVE-2021-25297
- https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md - https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md
@ -14,7 +14,7 @@ info:
cvss-score: 8.8 cvss-score: 8.8
cve-id: CVE-2021-25297 cve-id: CVE-2021-25297
cwe-id: CWE-78 cwe-id: CWE-78
tags: cve,cve2021,nagiosxi tags: cve,cve2021,nagiosxi,authenticated
requests: requests:
- raw: - raw:

6
cves/2021/CVE-2021-25298.yaml
View File

@ -1,10 +1,10 @@
id: CVE-2021-25298 id: CVE-2021-25298
info: info:
name: Nagios XI 5.7.5 Command Injection name: Nagios XI 5.5.6 to 5.7.5 Command Injection
author: k0pak4 author: k0pak4
severity: critical severity: critical
description: Nagios XI 5.7.5 is affected by OS command injection. An authenticated user can gain code execution with a single HTTP request due to unsanitized URL paramaters. description: Nagios XI versions 5.5.6 to 5.7.5 are affected by OS command injection. An authenticated user can gain code execution due to unsanitized URL paramaters.
reference: reference:
- https://nvd.nist.gov/vuln/detail/CVE-2021-25298 - https://nvd.nist.gov/vuln/detail/CVE-2021-25298
- https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md - https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md
@ -14,7 +14,7 @@ info:
cvss-score: 8.8 cvss-score: 8.8
cve-id: CVE-2021-25298 cve-id: CVE-2021-25298
cwe-id: CWE-78 cwe-id: CWE-78
tags: cve,cve2021,nagiosxi tags: cve,cve2021,nagiosxi,authenticated
requests: requests:
- raw: - raw: